From a203821616a355cbed8aff13fc9ba37fa7cacc26 Mon Sep 17 00:00:00 2001 From: Adriano Oliveira Date: Tue, 30 Aug 2022 14:42:49 +0000 Subject: [PATCH] K8s Coredump Handler: initial package Currently, it is not possible to set the core_pattern [1] on a per Pod basis. That is, the kernel.core_pattern sysctl is not namespaced and applies to the entire node. Applications demands exclusive access to the core dump data for debugging and support without enabling full access to the host OS files. In order to meet both the platform and application requirements, a new Kubernetes aware core dump handler is proposed. This review covers the initial code and packaging of this handler, which still represents limited functionality, only applying to very basic testing. Reference to coredump configuration: 1. https://man7.org/linux/man-pages/man5/coredump.conf.5.html Test Plan: PASS: Basic functionality after bootstrap (call handler directly) PASS: Check handler is called upon coredump (core_pattern config) Story: 2010261 Task: 46156 Depends-On: https://review.opendev.org/c/starlingx/integ/+/854682 Co-Authored-By: Samuel Presa Toledo Co-Authored-By: Heron Vieira Signed-off-by: Adriano Oliveira Change-Id: I7e18b27a6de1e74d8df3e4c28661959763ce7468 --- debian_pkg_dirs | 1 + utilities/k8s-coredump/LICENSE | 202 + utilities/k8s-coredump/PKG-INFO | 13 + .../k8s-coredump/debian/deb_folder/changelog | 5 + .../k8s-coredump/debian/deb_folder/control | 25 + .../k8s-coredump/debian/deb_folder/copyright | 27 + .../deb_folder/k8s-coredump-wheels.install | 1 + .../debian/deb_folder/k8s-coredump.dirs | 3 + .../debian/deb_folder/k8s-coredump.install | 4 + .../k8s-coredump/debian/deb_folder/rules | 21 + utilities/k8s-coredump/debian/meta_data.yaml | 9 + .../k8s-coredump/files/k8s-coredump.yaml | 46 + utilities/k8s-coredump/files/pods.json | 18883 ++++++++++++++++ utilities/k8s-coredump/k8s-coredump/LICENSE | 202 + .../k8s-coredump/k8s_coredump/__init__.py | 0 .../k8s-coredump/k8s_coredump/__main__.py | 18 + .../k8s_coredump/common/__init__.py | 0 .../k8s_coredump/common/constants.py | 6 + .../k8s-coredump/k8s_coredump/coredump.py | 142 + .../k8s-coredump/requirements.txt | 2 + utilities/k8s-coredump/k8s-coredump/setup.cfg | 27 + utilities/k8s-coredump/k8s-coredump/setup.py | 21 + 22 files changed, 19658 insertions(+) create mode 100644 utilities/k8s-coredump/LICENSE create mode 100644 utilities/k8s-coredump/PKG-INFO create mode 100644 utilities/k8s-coredump/debian/deb_folder/changelog create mode 100644 utilities/k8s-coredump/debian/deb_folder/control create mode 100644 utilities/k8s-coredump/debian/deb_folder/copyright create mode 100644 utilities/k8s-coredump/debian/deb_folder/k8s-coredump-wheels.install create mode 100644 utilities/k8s-coredump/debian/deb_folder/k8s-coredump.dirs create mode 100644 utilities/k8s-coredump/debian/deb_folder/k8s-coredump.install create mode 100755 utilities/k8s-coredump/debian/deb_folder/rules create mode 100644 utilities/k8s-coredump/debian/meta_data.yaml create mode 100644 utilities/k8s-coredump/files/k8s-coredump.yaml create mode 100644 utilities/k8s-coredump/files/pods.json create mode 100644 utilities/k8s-coredump/k8s-coredump/LICENSE create mode 100644 utilities/k8s-coredump/k8s-coredump/k8s_coredump/__init__.py create mode 100644 utilities/k8s-coredump/k8s-coredump/k8s_coredump/__main__.py create mode 100644 utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/__init__.py create mode 100644 utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/constants.py create mode 100644 utilities/k8s-coredump/k8s-coredump/k8s_coredump/coredump.py create mode 100644 utilities/k8s-coredump/k8s-coredump/requirements.txt create mode 100644 utilities/k8s-coredump/k8s-coredump/setup.cfg create mode 100644 utilities/k8s-coredump/k8s-coredump/setup.py diff --git a/debian_pkg_dirs b/debian_pkg_dirs index 268e597a..18dcce09 100644 --- a/debian_pkg_dirs +++ b/debian_pkg_dirs @@ -5,6 +5,7 @@ tools/collector tools/engtools/hostdata-collectors tools/pcm utilities/build-info +utilities/k8s-coredump utilities/logmgmt utilities/namespace-utils utilities/nfscheck diff --git a/utilities/k8s-coredump/LICENSE b/utilities/k8s-coredump/LICENSE new file mode 100644 index 00000000..d6456956 --- /dev/null +++ b/utilities/k8s-coredump/LICENSE @@ -0,0 +1,202 @@ + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/utilities/k8s-coredump/PKG-INFO b/utilities/k8s-coredump/PKG-INFO new file mode 100644 index 00000000..e8df396f --- /dev/null +++ b/utilities/k8s-coredump/PKG-INFO @@ -0,0 +1,13 @@ +Metadata-Version: 1.1 +Name: k8s-coredump +Version: 1.0 +Summary: Intercepts raw coredump and apply specific core pattern and namespace +Home-page: +Author: Windriver +Author-email: info@windriver.com +License: Apache-2.0 + +Description: Intercepts raw coredump and apply specific core pattern and namespace + + +Platform: UNKNOWN diff --git a/utilities/k8s-coredump/debian/deb_folder/changelog b/utilities/k8s-coredump/debian/deb_folder/changelog new file mode 100644 index 00000000..74e13a6e --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/changelog @@ -0,0 +1,5 @@ +k8s-coredump (1.0-1) unstable; urgency=medium + + * Initial release. + + -- Samuel Presa Toledo Mon, 01 Aug 2022 16:11:00 -0300 diff --git a/utilities/k8s-coredump/debian/deb_folder/control b/utilities/k8s-coredump/debian/deb_folder/control new file mode 100644 index 00000000..9262e238 --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/control @@ -0,0 +1,25 @@ +Source: k8s-coredump +Section: admin +Priority: optional +Maintainer: StarlingX Developers +Build-Depends: debhelper-compat (= 13), + dh-python, + python3-setuptools, + python3-wheel, + python3-all +Standards-Version: 4.4.1 +Homepage: https://www.starlingx.io + +Package: k8s-coredump +Architecture: all +Depends: ${python3:Depends}, ${misc:Depends}, + python3-requests, + python3-nsenter +Description: K8s Pod Coredump Handler + This package controls coredump using individual pods. + +Package: k8s-coredump-wheels +Architecture: all +Depends: ${python3:Depends}, ${misc:Depends}, +Description: Contains python wheels for k8s-coredump + This package contains python wheels for specific k8s-coredump diff --git a/utilities/k8s-coredump/debian/deb_folder/copyright b/utilities/k8s-coredump/debian/deb_folder/copyright new file mode 100644 index 00000000..385e575a --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/copyright @@ -0,0 +1,27 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: k8s-coredump +Source: https://opendev.org/starlingx/utilities/ + +Files: * +Copyright: (c) 2022 Wind River Systems, Inc +License: Apache-2 + +Files: debian/* +Copyright: 2022 Wind River Systems, Inc +License: Apache-2 + +License: Apache-2 + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + . + https://www.apache.org/licenses/LICENSE-2.0 + . + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. + . + On Debian-based systems the full text of the Apache version 2.0 license + can be found in `/usr/share/common-licenses/Apache-2.0'. diff --git a/utilities/k8s-coredump/debian/deb_folder/k8s-coredump-wheels.install b/utilities/k8s-coredump/debian/deb_folder/k8s-coredump-wheels.install new file mode 100644 index 00000000..4d646434 --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/k8s-coredump-wheels.install @@ -0,0 +1 @@ +wheels/k8s-coredump/*.whl diff --git a/utilities/k8s-coredump/debian/deb_folder/k8s-coredump.dirs b/utilities/k8s-coredump/debian/deb_folder/k8s-coredump.dirs new file mode 100644 index 00000000..545934f8 --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/k8s-coredump.dirs @@ -0,0 +1,3 @@ +etc/k8s-coredump +usr/lib/python3/dist-packages/k8s_coredump +usr/lib/python3/dist-packages/k8s_coredump-1.0.0.egg-info diff --git a/utilities/k8s-coredump/debian/deb_folder/k8s-coredump.install b/utilities/k8s-coredump/debian/deb_folder/k8s-coredump.install new file mode 100644 index 00000000..45b8cc8a --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/k8s-coredump.install @@ -0,0 +1,4 @@ +etc/k8s-coredump/* +usr/bin/k8s-coredump +usr/lib/python3/dist-packages/k8s_coredump/* +usr/lib/python3/dist-packages/k8s_coredump-1.0.0.egg-info/* diff --git a/utilities/k8s-coredump/debian/deb_folder/rules b/utilities/k8s-coredump/debian/deb_folder/rules new file mode 100755 index 00000000..75c260ac --- /dev/null +++ b/utilities/k8s-coredump/debian/deb_folder/rules @@ -0,0 +1,21 @@ +#!/usr/bin/make -f +#export DH_VERBOSE = 1 + +export PYBUILD_NAME = k8s-coredump +export PBR_VERSION=1.0.0 +export ROOT = debian/tmp +export ETC_K8S_DIR = $(ROOT)/etc/k8s-coredump + +%: + dh $@ --with python3 --buildsystem=pybuild + +override_dh_install: + python3 setup.py install --install-layout=deb --root=$(ROOT) + + python3 setup.py bdist_wheel --universal \ + -d $(ROOT)/wheels/$(PYBUILD_NAME) + + install -d -m 755 $(ETC_K8S_DIR) + install -p -D -m 644 files/k8s-coredump.yaml $(ETC_K8S_DIR) + install -p -D -m 644 files/pods.json $(ETC_K8S_DIR) + dh_install diff --git a/utilities/k8s-coredump/debian/meta_data.yaml b/utilities/k8s-coredump/debian/meta_data.yaml new file mode 100644 index 00000000..77c90df9 --- /dev/null +++ b/utilities/k8s-coredump/debian/meta_data.yaml @@ -0,0 +1,9 @@ +--- +debname: k8s-coredump +debver: 1.0-1 +src_path: k8s-coredump +src_files: + - files +revision: + dist: $STX_DIST + PKG_GITREVCOUNT: true diff --git a/utilities/k8s-coredump/files/k8s-coredump.yaml b/utilities/k8s-coredump/files/k8s-coredump.yaml new file mode 100644 index 00000000..50d82974 --- /dev/null +++ b/utilities/k8s-coredump/files/k8s-coredump.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: coredump + namespace: kube-system +secrets: +- name: coredump-secret-token +--- +apiVersion: v1 +kind: Secret +metadata: + name: coredump-secret-token + namespace: kube-system + annotations: + kubernetes.io/service-account.name: coredump +type: kubernetes.io/service-account-token +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: coredump-clusterrole + namespace: kube-system +rules: +- apiGroups: [""] + resources: + - nodes + - nodes/proxy + - pods + verbs: ["get", "list"] +- nonResourceURLs: ["/pods"] + verbs: ["get"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: coredump-clusterrole-binding + namespace: kube-system +roleRef: + kind: ClusterRole + name: coredump-clusterrole + apiGroup: rbac.authorization.k8s.io +subjects: +- kind: ServiceAccount + name: coredump + namespace: kube-system diff --git a/utilities/k8s-coredump/files/pods.json b/utilities/k8s-coredump/files/pods.json new file mode 100644 index 00000000..5eb49221 --- /dev/null +++ b/utilities/k8s-coredump/files/pods.json @@ -0,0 +1,18883 @@ +{ + "kind": "PodList", + "apiVersion": "v1", + "metadata": {}, + "items": [ + { + "metadata": { + "name": "kube-scheduler-controller-0", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/kube-scheduler-controller-0", + "uid": "70c7affef8b94b4fb0b86a026169f5d8", + "creationTimestamp": null, + "labels": { + "component": "kube-scheduler", + "tier": "control-plane" + }, + "annotations": { + "kubernetes.io/config.hash": "70c7affef8b94b4fb0b86a026169f5d8", + "kubernetes.io/config.seen": "2022-01-16T16:48:19.844033327Z", + "kubernetes.io/config.source": "file" + } + }, + "spec": { + "volumes": [ + { + "name": "kubeconfig", + "hostPath": { + "path": "/etc/kubernetes/scheduler.conf", + "type": "FileOrCreate" + } + } + ], + "containers": [ + { + "name": "kube-scheduler", + "image": "registry.local:9001/k8s.gcr.io/kube-scheduler:v1.21.3", + "command": [ + "kube-scheduler", + "--authentication-kubeconfig=/etc/kubernetes/scheduler.conf", + "--authorization-kubeconfig=/etc/kubernetes/scheduler.conf", + "--bind-address=127.0.0.1", + "--kubeconfig=/etc/kubernetes/scheduler.conf", + "--leader-elect=true", + "--port=0" + ], + "resources": { + "requests": { + "cpu": "0" + } + }, + "volumeMounts": [ + { + "name": "kubeconfig", + "readOnly": true, + "mountPath": "/etc/kubernetes/scheduler.conf" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/healthz", + "port": 10259, + "host": "127.0.0.1", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 15, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 8 + }, + "startupProbe": { + "httpGet": { + "path": "/healthz", + "port": 10259, + "host": "127.0.0.1", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 15, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 24 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoExecute" + } + ], + "priorityClassName": "system-node-critical", + "enableServiceLinks": true + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:25Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:49Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:49Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:25Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2022-01-16T16:48:25Z", + "containerStatuses": [ + { + "name": "kube-scheduler", + "state": { + "running": { + "startedAt": "2022-01-16T16:48:26Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-09T14:46:00Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://794d842b298b904f83f983dea8984117967f0073c58ace5331910a3765e83411" + } + }, + "ready": true, + "restartCount": 6, + "image": "registry.local:9001/k8s.gcr.io/kube-scheduler:v1.21.3", + "imageID": "registry.local:9001/k8s.gcr.io/kube-scheduler@sha256:b61779ea1bd936c137b25b3a7baa5551fbbd84fed8568d15c7c85ab1139521c0", + "containerID": "containerd://3f3c5e9602e00c731a061353893a3e5e8d70cfb6a21608aecf0e5707a230e5cd", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "calico-kube-controllers-7675fdd9d9-v2lsl", + "generateName": "calico-kube-controllers-7675fdd9d9-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/calico-kube-controllers-7675fdd9d9-v2lsl", + "uid": "997b7943-5fad-4b3d-b8fb-bb881f0201cb", + "resourceVersion": "4222711", + "creationTimestamp": "2021-11-17T17:02:03Z", + "labels": { + "k8s-app": "calico-kube-controllers", + "pod-template-hash": "7675fdd9d9" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.110\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.110\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995224708Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "calico-kube-controllers-7675fdd9d9", + "uid": "c7c6f950-9c52-47e6-9672-35caddfa3ce8", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:k8s-app": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"c7c6f950-9c52-47e6-9672-35caddfa3ce8\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"calico-kube-controllers\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"DATASTORE_TYPE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ENABLED_CONTROLLERS\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + }, + "f:failureThreshold": {}, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:readinessProbe": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + }, + "f:failureThreshold": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"registry-local-secret\"}": { + ".": {}, + "f:name": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/os": {} + }, + "f:priorityClassName": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {} + } + } + }, + { + "manager": "kube-scheduler", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + ".": {}, + "k:{\"type\":\"PodScheduled\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:message": {}, + "f:reason": {}, + "f:status": {}, + "f:type": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:13Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:13Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:31Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.73\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-kmkgr", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "calico-kube-controllers", + "image": "registry.local:9001/quay.io/calico/kube-controllers:v3.19.1", + "env": [ + { + "name": "ENABLED_CONTROLLERS", + "value": "node" + }, + { + "name": "DATASTORE_TYPE", + "value": "kubernetes" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-kmkgr", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "exec": { + "command": [ + "/usr/bin/check-status", + "-l" + ] + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 6 + }, + "readinessProbe": { + "exec": { + "command": [ + "/usr/bin/check-status", + "-r" + ] + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "kubernetes.io/os": "linux" + }, + "serviceAccountName": "calico-kube-controllers", + "serviceAccount": "calico-kube-controllers", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "registry-local-secret" + } + ], + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "CriticalAddonsOnly", + "operator": "Exists" + }, + { + "key": "node-role.kubernetes.io/master", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priorityClassName": "system-cluster-critical", + "priority": 2000000000, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:12Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:32Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:32Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:12Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.110", + "podIPs": [ + { + "ip": "172.16.192.110" + } + ], + "startTime": "2021-11-17T17:02:12Z", + "containerStatuses": [ + { + "name": "calico-kube-controllers", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:22Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:27Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://b1c7e81a49e1fd75cdbd5a5517076f2505b44bb7c6380b63d7ef6836f47ddb82" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/quay.io/calico/kube-controllers:v3.19.1", + "imageID": "registry.local:9001/quay.io/calico/kube-controllers@sha256:2ff71ba65cd7fe10e183ad80725ad3eafb59899d6f1b2610446b90c84bf2425a", + "containerID": "containerd://19f51bb0f0d1122b0aacbb7a3c146b85a3fb20f6311a4e2d873deb4cc93cb93b", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "calico-node-ht92l", + "generateName": "calico-node-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/calico-node-ht92l", + "uid": "28894489-d382-4203-bbb8-be7820967fbf", + "resourceVersion": "4257375", + "creationTimestamp": "2021-11-17T17:02:03Z", + "labels": { + "controller-revision-hash": "cc647999c", + "k8s-app": "calico-node", + "pod-template-generation": "1" + }, + "annotations": { + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995230864Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "DaemonSet", + "name": "calico-node", + "uid": "755375b6-a870-4a73-806d-a7080545e37e", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:controller-revision-hash": {}, + "f:k8s-app": {}, + "f:pod-template-generation": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"755375b6-a870-4a73-806d-a7080545e37e\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"calico-node\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CALICO_DISABLE_FILE_LOGGING\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CALICO_IPV4POOL_CIDR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CALICO_IPV4POOL_IPIP\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CALICO_IPV4POOL_NAT_OUTGOING\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CALICO_IPV4POOL_VXLAN\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CALICO_NETWORKING_BACKEND\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"CALICO_STARTUP_LOGLEVEL\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CLUSTER_TYPE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"DATASTORE_TYPE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_DEFAULTENDPOINTTOHOSTACTION\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_FAILSAFEINBOUNDHOSTPORTS\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_FAILSAFEOUTBOUNDHOSTPORTS\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_HEALTHENABLED\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_IPINIPMTU\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"FELIX_IPV6SUPPORT\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_LOGSEVERITYSCREEN\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"FELIX_VXLANMTU\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"FELIX_WIREGUARDMTU\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"IP\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"IP6\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"IP_AUTODETECTION_METHOD\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"NODENAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"WAIT_FOR_DATASTORE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:envFrom": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + }, + "f:failureThreshold": {}, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:readinessProbe": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + }, + "f:failureThreshold": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:requests": { + ".": {}, + "f:cpu": {} + } + }, + "f:securityContext": { + ".": {}, + "f:privileged": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/lib/modules\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/run/xtables.lock\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/sys/fs/\"}": { + ".": {}, + "f:mountPath": {}, + "f:mountPropagation": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/lib/calico\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/log/calico/cni\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/var/run/calico\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/nodeagent\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:hostNetwork": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"registry-local-secret\"}": { + ".": {}, + "f:name": {} + } + }, + "f:initContainers": { + ".": {}, + "k:{\"name\":\"flexvol-driver\"}": { + ".": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:privileged": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/host/driver\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"install-cni\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CNI_CONF_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CNI_MTU\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"CNI_NETWORK_CONFIG\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"KUBERNETES_NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"SLEEP\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"UPDATE_CNI_BINARIES\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:envFrom": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:privileged": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/host/etc/cni/net.d\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/host/opt/cni/bin\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"upgrade-ipam\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CALICO_NETWORKING_BACKEND\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"KUBERNETES_NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:envFrom": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:privileged": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/host/opt/cni/bin\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/lib/cni/networks\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/os": {} + }, + "f:priorityClassName": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"cni-bin-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"cni-log-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"cni-net-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"flexvol-driver-host\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"host-local-net-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"lib-modules\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"policysync\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"sysfs\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"var-lib-calico\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"var-run-calico\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"xtables-lock\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T15:19:01Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"192.168.204.2\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "lib-modules", + "hostPath": { + "path": "/lib/modules", + "type": "" + } + }, + { + "name": "var-run-calico", + "hostPath": { + "path": "/var/run/calico", + "type": "" + } + }, + { + "name": "var-lib-calico", + "hostPath": { + "path": "/var/lib/calico", + "type": "" + } + }, + { + "name": "xtables-lock", + "hostPath": { + "path": "/run/xtables.lock", + "type": "FileOrCreate" + } + }, + { + "name": "sysfs", + "hostPath": { + "path": "/sys/fs/", + "type": "DirectoryOrCreate" + } + }, + { + "name": "cni-bin-dir", + "hostPath": { + "path": "/usr/libexec/cni", + "type": "" + } + }, + { + "name": "cni-net-dir", + "hostPath": { + "path": "/etc/cni/net.d", + "type": "" + } + }, + { + "name": "cni-log-dir", + "hostPath": { + "path": "/var/log/calico/cni", + "type": "" + } + }, + { + "name": "host-local-net-dir", + "hostPath": { + "path": "/var/lib/cni/networks", + "type": "" + } + }, + { + "name": "policysync", + "hostPath": { + "path": "/var/run/nodeagent", + "type": "DirectoryOrCreate" + } + }, + { + "name": "flexvol-driver-host", + "hostPath": { + "path": "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds", + "type": "DirectoryOrCreate" + } + }, + { + "name": "kube-api-access-jqxsb", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "upgrade-ipam", + "image": "registry.local:9001/quay.io/calico/cni:v3.19.1", + "command": [ + "/opt/cni/bin/calico-ipam", + "-upgrade" + ], + "envFrom": [ + { + "configMapRef": { + "name": "kubernetes-services-endpoint", + "optional": true + } + } + ], + "env": [ + { + "name": "KUBERNETES_NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + }, + { + "name": "CALICO_NETWORKING_BACKEND", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "calico_backend" + } + } + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "host-local-net-dir", + "mountPath": "/var/lib/cni/networks" + }, + { + "name": "cni-bin-dir", + "mountPath": "/host/opt/cni/bin" + }, + { + "name": "kube-api-access-jqxsb", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "privileged": true + } + }, + { + "name": "install-cni", + "image": "registry.local:9001/quay.io/calico/cni:v3.19.1", + "command": [ + "/opt/cni/bin/install" + ], + "envFrom": [ + { + "configMapRef": { + "name": "kubernetes-services-endpoint", + "optional": true + } + } + ], + "env": [ + { + "name": "CNI_CONF_NAME", + "value": "10-calico.conflist" + }, + { + "name": "CNI_NETWORK_CONFIG", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "cni_network_config" + } + } + }, + { + "name": "KUBERNETES_NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + }, + { + "name": "CNI_MTU", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "veth_mtu" + } + } + }, + { + "name": "SLEEP", + "value": "false" + }, + { + "name": "UPDATE_CNI_BINARIES", + "value": "false" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "cni-bin-dir", + "mountPath": "/host/opt/cni/bin" + }, + { + "name": "cni-net-dir", + "mountPath": "/host/etc/cni/net.d" + }, + { + "name": "kube-api-access-jqxsb", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "privileged": true + } + }, + { + "name": "flexvol-driver", + "image": "registry.local:9001/quay.io/calico/pod2daemon-flexvol:v3.19.1", + "resources": {}, + "volumeMounts": [ + { + "name": "flexvol-driver-host", + "mountPath": "/host/driver" + }, + { + "name": "kube-api-access-jqxsb", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "privileged": true + } + } + ], + "containers": [ + { + "name": "calico-node", + "image": "registry.local:9001/quay.io/calico/node:v3.19.1", + "envFrom": [ + { + "configMapRef": { + "name": "kubernetes-services-endpoint", + "optional": true + } + } + ], + "env": [ + { + "name": "FELIX_FAILSAFEINBOUNDHOSTPORTS", + "value": "tcp:22, udp:68, tcp:179, tcp:6443" + }, + { + "name": "FELIX_FAILSAFEOUTBOUNDHOSTPORTS", + "value": "udp:53, udp:67, tcp:179, tcp:6443" + }, + { + "name": "DATASTORE_TYPE", + "value": "kubernetes" + }, + { + "name": "WAIT_FOR_DATASTORE", + "value": "true" + }, + { + "name": "NODENAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + }, + { + "name": "CALICO_NETWORKING_BACKEND", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "calico_backend" + } + } + }, + { + "name": "CLUSTER_TYPE", + "value": "k8s,bgp" + }, + { + "name": "IP", + "value": "autodetect" + }, + { + "name": "IP_AUTODETECTION_METHOD", + "value": "can-reach=192.168.206.2" + }, + { + "name": "CALICO_IPV4POOL_IPIP", + "value": "Always" + }, + { + "name": "CALICO_IPV4POOL_VXLAN", + "value": "Never" + }, + { + "name": "CALICO_IPV4POOL_CIDR", + "value": "172.16.0.0/16" + }, + { + "name": "CALICO_IPV4POOL_NAT_OUTGOING", + "value": "true" + }, + { + "name": "IP6", + "value": "none" + }, + { + "name": "FELIX_IPINIPMTU", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "veth_mtu" + } + } + }, + { + "name": "FELIX_VXLANMTU", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "veth_mtu" + } + } + }, + { + "name": "FELIX_WIREGUARDMTU", + "valueFrom": { + "configMapKeyRef": { + "name": "calico-config", + "key": "veth_mtu" + } + } + }, + { + "name": "CALICO_DISABLE_FILE_LOGGING", + "value": "true" + }, + { + "name": "CALICO_STARTUP_LOGLEVEL", + "value": "warning" + }, + { + "name": "FELIX_DEFAULTENDPOINTTOHOSTACTION", + "value": "ACCEPT" + }, + { + "name": "FELIX_IPV6SUPPORT", + "value": "false" + }, + { + "name": "FELIX_HEALTHENABLED", + "value": "true" + }, + { + "name": "FELIX_LOGSEVERITYSCREEN", + "value": "warning" + } + ], + "resources": { + "requests": { + "cpu": "250m" + } + }, + "volumeMounts": [ + { + "name": "lib-modules", + "readOnly": true, + "mountPath": "/lib/modules" + }, + { + "name": "xtables-lock", + "mountPath": "/run/xtables.lock" + }, + { + "name": "var-run-calico", + "mountPath": "/var/run/calico" + }, + { + "name": "var-lib-calico", + "mountPath": "/var/lib/calico" + }, + { + "name": "policysync", + "mountPath": "/var/run/nodeagent" + }, + { + "name": "sysfs", + "mountPath": "/sys/fs/", + "mountPropagation": "Bidirectional" + }, + { + "name": "cni-log-dir", + "readOnly": true, + "mountPath": "/var/log/calico/cni" + }, + { + "name": "kube-api-access-jqxsb", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "exec": { + "command": [ + "/bin/calico-node", + "-felix-live", + "-bird-live" + ] + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 6 + }, + "readinessProbe": { + "exec": { + "command": [ + "/bin/calico-node", + "-felix-ready", + "-bird-ready" + ] + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "privileged": true + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 0, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "kubernetes.io/os": "linux" + }, + "serviceAccountName": "calico-node", + "serviceAccount": "calico-node", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "registry-local-secret" + } + ], + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchFields": [ + { + "key": "metadata.name", + "operator": "In", + "values": [ + "controller-0" + ] + } + ] + } + ] + } + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "CriticalAddonsOnly", + "operator": "Exists" + }, + { + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/disk-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/memory-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/pid-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/unschedulable", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/network-unavailable", + "operator": "Exists", + "effect": "NoSchedule" + } + ], + "priorityClassName": "system-node-critical", + "priority": 2000001000, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:21Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:01Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [calico-node]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:01Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [calico-node]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:03Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2021-11-17T17:02:03Z", + "initContainerStatuses": [ + { + "name": "upgrade-ipam", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2022-01-16T16:50:15Z", + "finishedAt": "2022-01-16T16:50:15Z", + "containerID": "containerd://71eb31d36328d84cece74ab6a1397f8342cc8fefed9953e975e0153c06233177" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 1, + "image": "registry.local:9001/quay.io/calico/cni:v3.19.1", + "imageID": "registry.local:9001/quay.io/calico/cni@sha256:51f294c56842e731fa8d7bdf6b9ba39771f69ba4eda28e186461be2662e599df", + "containerID": "containerd://71eb31d36328d84cece74ab6a1397f8342cc8fefed9953e975e0153c06233177" + }, + { + "name": "install-cni", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2022-01-16T16:50:17Z", + "finishedAt": "2022-01-16T16:50:19Z", + "containerID": "containerd://8b8c58a99c4cc01d98b4bf6024e6c749cf01acdfc03ea08d5c3409bba7007dba" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "registry.local:9001/quay.io/calico/cni:v3.19.1", + "imageID": "registry.local:9001/quay.io/calico/cni@sha256:51f294c56842e731fa8d7bdf6b9ba39771f69ba4eda28e186461be2662e599df", + "containerID": "containerd://8b8c58a99c4cc01d98b4bf6024e6c749cf01acdfc03ea08d5c3409bba7007dba" + }, + { + "name": "flexvol-driver", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2022-01-16T16:50:20Z", + "finishedAt": "2022-01-16T16:50:20Z", + "containerID": "containerd://939a68ae451b9a7e7b8eba6195e594f239634cdceb32bf0184c2f4f412ce1d34" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "registry.local:9001/quay.io/calico/pod2daemon-flexvol:v3.19.1", + "imageID": "registry.local:9001/quay.io/calico/pod2daemon-flexvol@sha256:c1f36b6e18e0d561c0e917aa25a45c62f85ac8f58649e57440232600fb33de9d", + "containerID": "containerd://939a68ae451b9a7e7b8eba6195e594f239634cdceb32bf0184c2f4f412ce1d34" + } + ], + "containerStatuses": [ + { + "name": "calico-node", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:22Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:25Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://b8bf988b8228e015d6175ab56ba1ac659e4e315ae84e0ae2bb8378a0165e91dd" + } + }, + "ready": false, + "restartCount": 4, + "image": "registry.local:9001/quay.io/calico/node:v3.19.1", + "imageID": "registry.local:9001/quay.io/calico/node@sha256:bc4aa22272ef814ed4c3ce02b78fab8ddf446fceeef370482c4ebc4edabc06a1", + "containerID": "containerd://57d4e72720359906c96ad16b6d231cf75e4453b5dfe6687d89575dd755197334", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "ic-nginx-ingress-ingress-nginx-controller-8v42m", + "generateName": "ic-nginx-ingress-ingress-nginx-controller-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/ic-nginx-ingress-ingress-nginx-controller-8v42m", + "uid": "5ffdec67-ebab-4312-bbdc-46d588c851c6", + "resourceVersion": "4222365", + "creationTimestamp": "2021-11-17T17:06:40Z", + "labels": { + "app.kubernetes.io/component": "controller", + "app.kubernetes.io/instance": "ic-nginx-ingress", + "app.kubernetes.io/name": "ingress-nginx", + "controller-revision-hash": "58dd647d5c", + "pod-template-generation": "1" + }, + "annotations": { + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995191892Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "DaemonSet", + "name": "ic-nginx-ingress-ingress-nginx-controller", + "uid": "673bdfc7-bf5b-467a-adc0-560b3927cf56", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:06:40Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app.kubernetes.io/component": {}, + "f:app.kubernetes.io/instance": {}, + "f:app.kubernetes.io/name": {}, + "f:controller-revision-hash": {}, + "f:pod-template-generation": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"673bdfc7-bf5b-467a-adc0-560b3927cf56\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"controller\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"LD_PRELOAD\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"POD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:lifecycle": { + ".": {}, + "f:preStop": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + } + } + }, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":80,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:hostPort": {}, + "f:name": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:hostPort": {}, + "f:name": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":5443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:hostPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:requests": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:add": {}, + "f:drop": {} + }, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/usr/local/certificates/\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:hostNetwork": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"default-registry-key\"}": { + ".": {}, + "f:name": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/os": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"webhook-cert\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:secretName": {} + } + } + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:54Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"192.168.204.2\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "webhook-cert", + "secret": { + "secretName": "ic-nginx-ingress-ingress-nginx-admission", + "defaultMode": 420 + } + }, + { + "name": "kube-api-access-ddjc6", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "controller", + "image": "registry.local:9001/k8s.gcr.io/ingress-nginx/controller:v0.41.2", + "args": [ + "/nginx-ingress-controller", + "--publish-service=$(POD_NAMESPACE)/ic-nginx-ingress-ingress-nginx-controller", + "--election-id=ingress-controller-leader", + "--ingress-class=nginx", + "--configmap=kube-system/ic-nginx-ingress-ingress-nginx-controller", + "--validating-webhook=:5443", + "--validating-webhook-certificate=/usr/local/certificates/cert", + "--validating-webhook-key=/usr/local/certificates/key" + ], + "ports": [ + { + "name": "http", + "hostPort": 80, + "containerPort": 80, + "protocol": "TCP" + }, + { + "name": "https", + "hostPort": 443, + "containerPort": 443, + "protocol": "TCP" + }, + { + "name": "webhook", + "hostPort": 5443, + "containerPort": 5443, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "LD_PRELOAD", + "value": "/usr/local/lib/libmimalloc.so" + } + ], + "resources": { + "requests": { + "cpu": "100m", + "memory": "90Mi" + } + }, + "volumeMounts": [ + { + "name": "webhook-cert", + "readOnly": true, + "mountPath": "/usr/local/certificates/" + }, + { + "name": "kube-api-access-ddjc6", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/healthz", + "port": 10254, + "scheme": "HTTP" + }, + "initialDelaySeconds": 30, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 5 + }, + "readinessProbe": { + "httpGet": { + "path": "/healthz", + "port": 10254, + "scheme": "HTTP" + }, + "initialDelaySeconds": 30, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "lifecycle": { + "preStop": { + "exec": { + "command": [ + "/wait-shutdown" + ] + } + } + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "add": [ + "NET_BIND_SERVICE" + ], + "drop": [ + "ALL" + ] + }, + "runAsUser": 101, + "allowPrivilegeEscalation": true + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 300, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "kubernetes.io/os": "linux", + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "ic-nginx-ingress-ingress-nginx", + "serviceAccount": "ic-nginx-ingress-ingress-nginx", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchFields": [ + { + "key": "metadata.name", + "operator": "In", + "values": [ + "controller-0" + ] + } + ] + } + ] + } + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/disk-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/memory-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/pid-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/unschedulable", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/network-unavailable", + "operator": "Exists", + "effect": "NoSchedule" + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:06:40Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:52Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:52Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:06:40Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2021-11-17T17:06:40Z", + "containerStatuses": [ + { + "name": "controller", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:16Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:16Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://ba993e82bef280acf87d1adb98db66e0efc0e03533a1db6269aad2cad2dc1499" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/k8s.gcr.io/ingress-nginx/controller:v0.41.2", + "imageID": "registry.local:9001/k8s.gcr.io/ingress-nginx/controller@sha256:8aa4fda472ec83ae59fe0ce9720684d769ed277ff9bdcbb0169178dc9d1f8e85", + "containerID": "containerd://d48a846977a026dd55570a23fe86d2c4e77ed92a3baba8b3bfcb79a61665d64e", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "cephfs-provisioner-bd46f868-gxzwd", + "generateName": "cephfs-provisioner-bd46f868-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/cephfs-provisioner-bd46f868-gxzwd", + "uid": "800d128b-650c-4a86-ae7b-1af5e31179a8", + "resourceVersion": "4222014", + "creationTimestamp": "2021-11-17T20:34:11Z", + "labels": { + "app": "cephfs-provisioner", + "pod-template-hash": "bd46f868" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.111\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.111\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995206855Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "cephfs-provisioner-bd46f868", + "uid": "71914bab-2086-4f94-8fe6-46e07895d310", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T20:34:11Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"71914bab-2086-4f94-8fe6-46e07895d310\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"cephfs-provisioner\"}": { + ".": {}, + "f:args": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"PROVISIONER_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"PROVISIONER_SECRET_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T20:34:12Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T20:34:12Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:29Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.89\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-lnl52", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "cephfs-provisioner", + "image": "registry.local:9001/quay.io/external_storage/cephfs-provisioner:v2.1.0-k8s1.11", + "command": [ + "/usr/local/bin/cephfs-provisioner" + ], + "args": [ + "-id=cephfs-provisioner-1" + ], + "env": [ + { + "name": "PROVISIONER_NAME", + "value": "ceph.com/cephfs" + }, + { + "name": "PROVISIONER_SECRET_NAMESPACE", + "value": "kube-system" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-lnl52", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "cephfs-provisioner", + "serviceAccount": "cephfs-provisioner", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "podAntiAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": [ + { + "labelSelector": { + "matchExpressions": [ + { + "key": "app", + "operator": "In", + "values": [ + "cephfs-provisioner" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T20:34:11Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:35Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:35Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T20:34:11Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.111", + "podIPs": [ + { + "ip": "172.16.192.111" + } + ], + "startTime": "2021-11-17T20:34:11Z", + "containerStatuses": [ + { + "name": "cephfs-provisioner", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:34Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:29Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://1b198fa07602cebf5e78b0bd2f005cc926b2ebe64226104abd5fb154de3d80fe" + } + }, + "ready": true, + "restartCount": 3, + "image": "registry.local:9001/quay.io/external_storage/cephfs-provisioner:v2.1.0-k8s1.11", + "imageID": "registry.local:9001/quay.io/external_storage/cephfs-provisioner@sha256:f36d4b9d644328de98eeb9a61db35f2e74f5c53547199771ea1392ed210e5002", + "containerID": "containerd://420950d7fe76f10ad4bc447e6a8017e349d36a0a5987ef087b10053e0d2e22b6", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "istio-ingressgateway-8577c57fb6-v9xcx", + "generateName": "istio-ingressgateway-8577c57fb6-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/istio-ingressgateway-8577c57fb6-v9xcx", + "uid": "0802abd9-3eea-43cf-9430-698e8dadc225", + "resourceVersion": "4222396", + "creationTimestamp": "2021-12-01T13:24:43Z", + "labels": { + "app": "istio-ingressgateway", + "chart": "gateways", + "heritage": "Tiller", + "install.operator.istio.io/owning-resource": "unknown", + "istio": "ingressgateway", + "istio.io/rev": "default", + "operator.istio.io/component": "IngressGateways", + "pod-template-hash": "8577c57fb6", + "release": "istio", + "service.istio.io/canonical-name": "istio-ingressgateway", + "service.istio.io/canonical-revision": "latest", + "sidecar.istio.io/inject": "false" + }, + "annotations": { + "cni.projectcalico.org/podIP": "172.16.192.80/32", + "cni.projectcalico.org/podIPs": "172.16.192.80/32", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.80\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.80\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995219887Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "istio-ingressgateway-8577c57fb6", + "uid": "d7a2ba96-766c-44e1-b820-46312d290128", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:43Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:prometheus.io/path": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:chart": {}, + "f:heritage": {}, + "f:install.operator.istio.io/owning-resource": {}, + "f:istio": {}, + "f:istio.io/rev": {}, + "f:operator.istio.io/component": {}, + "f:pod-template-hash": {}, + "f:release": {}, + "f:service.istio.io/canonical-name": {}, + "f:service.istio.io/canonical-revision": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"d7a2ba96-766c-44e1-b820-46312d290128\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:preferredDuringSchedulingIgnoredDuringExecution": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"istio-proxy\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CA_ADDR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"HOST_IP\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"INSTANCE_IP\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"ISTIO_META_CLUSTER_ID\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_MESH_ID\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_OWNER\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_ROUTER_MODE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_UNPRIVILEGED_POD\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_WORKLOAD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"JWT_POLICY\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"PILOT_CERT_PROVIDER\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"POD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"SERVICE_ACCOUNT\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"TRUST_DOMAIN\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":8443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":15021,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":15090,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":15443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":31400,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:limits": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + }, + "f:requests": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:drop": {} + }, + "f:privileged": {}, + "f:readOnlyRootFilesystem": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/istio/config\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/etc/istio/ingressgateway-ca-certs\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/etc/istio/ingressgateway-certs\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/etc/istio/pod\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/etc/istio/proxy\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/lib/istio/data\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/istio\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/tokens\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": { + ".": {}, + "f:fsGroup": {}, + "f:runAsGroup": {}, + "f:runAsNonRoot": {}, + "f:runAsUser": {} + }, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"config-volume\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {}, + "f:optional": {} + }, + "f:name": {} + }, + "k:{\"name\":\"ingressgateway-ca-certs\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"ingressgateway-certs\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"istio-data\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"istio-envoy\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"istio-token\"}": { + ".": {}, + "f:name": {}, + "f:projected": { + ".": {}, + "f:defaultMode": {}, + "f:sources": {} + } + }, + "k:{\"name\":\"istiod-ca-cert\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"podinfo\"}": { + ".": {}, + "f:downwardAPI": { + ".": {}, + "f:defaultMode": {}, + "f:items": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:52Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:53Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:57Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.103\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-envoy", + "emptyDir": {} + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "config-volume", + "configMap": { + "name": "istio", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "ingressgateway-certs", + "secret": { + "secretName": "istio-ingressgateway-certs", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "ingressgateway-ca-certs", + "secret": { + "secretName": "istio-ingressgateway-ca-certs", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "kube-api-access-nsv9r", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "router", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info" + ], + "ports": [ + { + "containerPort": 15021, + "protocol": "TCP" + }, + { + "containerPort": 8080, + "protocol": "TCP" + }, + { + "containerPort": 8443, + "protocol": "TCP" + }, + { + "containerPort": 31400, + "protocol": "TCP" + }, + { + "containerPort": 15443, + "protocol": "TCP" + }, + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "istio-ingressgateway" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/istio-system/deployments/istio-ingressgateway" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + }, + { + "name": "ISTIO_META_UNPRIVILEGED_POD", + "value": "true" + }, + { + "name": "ISTIO_META_ROUTER_MODE", + "value": "standard" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "config-volume", + "mountPath": "/etc/istio/config" + }, + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-token", + "readOnly": true, + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "ingressgateway-certs", + "readOnly": true, + "mountPath": "/etc/istio/ingressgateway-certs" + }, + { + "name": "ingressgateway-ca-certs", + "readOnly": true, + "mountPath": "/etc/istio/ingressgateway-ca-certs" + }, + { + "name": "kube-api-access-nsv9r", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 1, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "istio-ingressgateway-service-account", + "serviceAccount": "istio-ingressgateway-service-account", + "nodeName": "controller-0", + "securityContext": { + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "fsGroup": 1337 + }, + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "amd64", + "ppc64le", + "s390x" + ] + } + ] + } + ] + }, + "preferredDuringSchedulingIgnoredDuringExecution": [ + { + "weight": 2, + "preference": { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "amd64" + ] + } + ] + } + }, + { + "weight": 2, + "preference": { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "ppc64le" + ] + } + ] + } + }, + { + "weight": 2, + "preference": { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "s390x" + ] + } + ] + } + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:58Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:58Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.80", + "podIPs": [ + { + "ip": "172.16.192.80" + } + ], + "startTime": "2021-12-01T13:24:46Z", + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:27Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:54Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://59e17f0e8e56722da961700a5b86f5f5b0768474afbace929ee548c08259d26d" + } + }, + "ready": true, + "restartCount": 1, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://71e528d215e5b746ba1b32cde8745decdee941644e531bbb5c60339fb0adfa23", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "coredns-5f4fcc5c76-rhdkk", + "generateName": "coredns-5f4fcc5c76-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/coredns-5f4fcc5c76-rhdkk", + "uid": "b80f3cd0-696a-4ae5-9ed7-3366544b9eaa", + "resourceVersion": "4222726", + "creationTimestamp": "2021-11-17T17:02:03Z", + "labels": { + "k8s-app": "kube-dns", + "pod-template-hash": "5f4fcc5c76" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.108\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.108\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995170031Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "coredns-5f4fcc5c76", + "uid": "a620a893-a9f8-487c-81be-c79daff92574", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:k8s-app": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"a620a893-a9f8-487c-81be-c79daff92574\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"coredns\"}": { + ".": {}, + "f:args": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":9153,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:limits": { + ".": {}, + "f:memory": {} + }, + "f:requests": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:add": {}, + "f:drop": {} + }, + "f:readOnlyRootFilesystem": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/coredns\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/os": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:priorityClassName": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"config-volume\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:items": {}, + "f:name": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "kube-scheduler", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + ".": {}, + "k:{\"type\":\"PodScheduled\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:message": {}, + "f:reason": {}, + "f:status": {}, + "f:type": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:13Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:13Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:31Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.85\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "config-volume", + "configMap": { + "name": "coredns", + "items": [ + { + "key": "Corefile", + "path": "Corefile" + } + ], + "defaultMode": 420 + } + }, + { + "name": "kube-api-access-lc7tx", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "coredns", + "image": "registry.local:9001/k8s.gcr.io/coredns/coredns:v1.8.0", + "args": [ + "-conf", + "/etc/coredns/Corefile" + ], + "ports": [ + { + "name": "dns", + "containerPort": 53, + "protocol": "UDP" + }, + { + "name": "dns-tcp", + "containerPort": 53, + "protocol": "TCP" + }, + { + "name": "metrics", + "containerPort": 9153, + "protocol": "TCP" + } + ], + "resources": { + "limits": { + "memory": "170Mi" + }, + "requests": { + "cpu": "0", + "memory": "70Mi" + } + }, + "volumeMounts": [ + { + "name": "config-volume", + "readOnly": true, + "mountPath": "/etc/coredns" + }, + { + "name": "kube-api-access-lc7tx", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/health", + "port": 8080, + "scheme": "HTTP" + }, + "initialDelaySeconds": 60, + "timeoutSeconds": 5, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 5 + }, + "readinessProbe": { + "httpGet": { + "path": "/ready", + "port": 8181, + "scheme": "HTTP" + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "add": [ + "NET_BIND_SERVICE" + ], + "drop": [ + "all" + ] + }, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "Default", + "nodeSelector": { + "kubernetes.io/os": "linux", + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "coredns", + "serviceAccount": "coredns", + "nodeName": "controller-0", + "securityContext": {}, + "affinity": { + "podAntiAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": [ + { + "labelSelector": { + "matchExpressions": [ + { + "key": "k8s-app", + "operator": "In", + "values": [ + "kube-dns" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "CriticalAddonsOnly", + "operator": "Exists" + }, + { + "key": "node-role.kubernetes.io/master", + "effect": "NoSchedule" + }, + { + "key": "node-role.kubernetes.io/control-plane", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priorityClassName": "system-cluster-critical", + "priority": 2000000000, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:12Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:32Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:32Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:12Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.108", + "podIPs": [ + { + "ip": "172.16.192.108" + } + ], + "startTime": "2021-11-17T17:02:12Z", + "containerStatuses": [ + { + "name": "coredns", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:28Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:27Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://1383f682aac34e31ba1a33056744bc64971f98428e1c5446dbb9480f5404fe2e" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/k8s.gcr.io/coredns/coredns:v1.8.0", + "imageID": "registry.local:9001/k8s.gcr.io/coredns/coredns@sha256:10ecc12177735e5a6fd6fa0127202776128d860ed7ab0341780ddaeb1f6dfe61", + "containerID": "containerd://1cfeb3a9e1a1cd567bb6fad162aa48651558838fb0bfd7e6411b04efa73fa37f", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "cm-cert-manager-74cc8d687-nxlpp", + "generateName": "cm-cert-manager-74cc8d687-", + "namespace": "cert-manager", + "selfLink": "/api/v1/namespaces/cert-manager/pods/cm-cert-manager-74cc8d687-nxlpp", + "uid": "3343c282-7264-4060-a619-ef05fed5d72d", + "resourceVersion": "4222007", + "creationTimestamp": "2021-11-17T17:08:38Z", + "labels": { + "app": "cert-manager", + "app.kubernetes.io/component": "controller", + "app.kubernetes.io/instance": "cm-cert-manager", + "app.kubernetes.io/managed-by": "Tiller", + "app.kubernetes.io/name": "cert-manager", + "helm.sh/chart": "cert-manager-v0.1.0", + "pod-template-hash": "74cc8d687" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.79\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.79\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995208003Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/metrics", + "prometheus.io/port": "9402", + "prometheus.io/scrape": "true" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "cm-cert-manager-74cc8d687", + "uid": "98288f06-ff62-4b60-8290-69697227f3ff", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:38Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:prometheus.io/path": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:app.kubernetes.io/component": {}, + "f:app.kubernetes.io/instance": {}, + "f:app.kubernetes.io/managed-by": {}, + "f:app.kubernetes.io/name": {}, + "f:helm.sh/chart": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"98288f06-ff62-4b60-8290-69697227f3ff\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"cert-manager\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9402,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:39Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:39Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:41Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.95\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-6dqkq", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "cert-manager", + "image": "registry.local:9001/quay.io/jetstack/cert-manager-controller:v0.15.0", + "args": [ + "--v=2", + "--cluster-resource-namespace=$(POD_NAMESPACE)", + "--leader-election-namespace=kube-system", + "--acme-http01-solver-image=registry.local:9001/quay.io/jetstack/cert-manager-acmesolver:v0.15.0", + "--enable-certificate-owner-ref=true" + ], + "ports": [ + { + "containerPort": 9402, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-6dqkq", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "cm-cert-manager", + "serviceAccount": "cm-cert-manager", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "podAntiAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": [ + { + "labelSelector": { + "matchExpressions": [ + { + "key": "app", + "operator": "In", + "values": [ + "cert-manager" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:08:38Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:28Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:28Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:08:38Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.79", + "podIPs": [ + { + "ip": "172.16.192.79" + } + ], + "startTime": "2021-11-17T17:08:38Z", + "containerStatuses": [ + { + "name": "cert-manager", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:27Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:40Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://8327e7bd87721d9f87184fb9413d2386569501a03151b6b2022e79e0701eaeeb" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/quay.io/jetstack/cert-manager-controller:v0.15.0", + "imageID": "registry.local:9001/quay.io/jetstack/cert-manager-controller@sha256:86af2974e01d79aa42607ab452bfd2604f9fccf0afb2732ef4de2e93e5302c6c", + "containerID": "containerd://5c5685a6e34f0b41ef11cd3783300abe95f7a847bc3c331944f3cb4b129a654c", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "rbd-provisioner-759dfb8b6b-5ttkz", + "generateName": "rbd-provisioner-759dfb8b6b-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/rbd-provisioner-759dfb8b6b-5ttkz", + "uid": "b497c256-2427-4598-a454-e9f91cbdee70", + "resourceVersion": "4221981", + "creationTimestamp": "2021-11-17T20:33:13Z", + "labels": { + "app": "rbd-provisioner", + "pod-template-hash": "759dfb8b6b" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.77\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.77\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995210279Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "rbd-provisioner-759dfb8b6b", + "uid": "3d06ce1c-3984-4f37-957b-d1f1903a86e0", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T20:33:13Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"3d06ce1c-3984-4f37-957b-d1f1903a86e0\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"rbd-provisioner\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"PROVISIONER_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T20:33:14Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T20:33:14Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:30Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.90\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-srp8k", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "rbd-provisioner", + "image": "registry.local:9001/quay.io/external_storage/rbd-provisioner:v2.1.1-k8s1.11", + "env": [ + { + "name": "PROVISIONER_NAME", + "value": "ceph.com/rbd" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-srp8k", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "rbd-provisioner", + "serviceAccount": "rbd-provisioner", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "podAntiAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": [ + { + "labelSelector": { + "matchExpressions": [ + { + "key": "app", + "operator": "In", + "values": [ + "rbd-provisioner" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T20:33:13Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:26Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:26Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T20:33:13Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.77", + "podIPs": [ + { + "ip": "172.16.192.77" + } + ], + "startTime": "2021-11-17T20:33:13Z", + "containerStatuses": [ + { + "name": "rbd-provisioner", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:25Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:29Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://00d5fe837d964515862cfd985b0741b9027b55e95fb076e7b7715500ad94826a" + } + }, + "ready": true, + "restartCount": 3, + "image": "registry.local:9001/quay.io/external_storage/rbd-provisioner:v2.1.1-k8s1.11", + "imageID": "registry.local:9001/quay.io/external_storage/rbd-provisioner@sha256:b8ad79759bcd2dd289546bc350e3cf4cb2d7567ba9166e2ac57750a2277df4e9", + "containerID": "containerd://58f6e0d053cc65f30a10ef19826f49a3495cdb19dd5f71be487a2965d6dd2ff1", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "istio-operator-6f9dcd4469-g77rh", + "generateName": "istio-operator-6f9dcd4469-", + "namespace": "istio-operator", + "selfLink": "/api/v1/namespaces/istio-operator/pods/istio-operator-6f9dcd4469-g77rh", + "uid": "1c3980c5-0a23-4cec-9d6e-193010dc2168", + "resourceVersion": "4221897", + "creationTimestamp": "2021-11-25T19:24:38Z", + "labels": { + "name": "istio-operator", + "pod-template-hash": "6f9dcd4469" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.83\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.83\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995218039Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "istio-operator-6f9dcd4469", + "uid": "6bfd7c7c-c5df-4ae9-b136-17b514b4d499", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:38Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:name": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"6bfd7c7c-c5df-4ae9-b136-17b514b4d499\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"istio-operator\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"LEADER_ELECTION_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"OPERATOR_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"POD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"REVISION\"}": { + ".": {}, + "f:name": {} + }, + "k:{\"name\":\"WAIT_FOR_RESOURCES_TIMEOUT\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"WATCH_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": { + ".": {}, + "f:limits": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + }, + "f:requests": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:drop": {} + }, + "f:privileged": {}, + "f:readOnlyRootFilesystem": {}, + "f:runAsGroup": {}, + "f:runAsNonRoot": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:31Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.93\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-25w47", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "istio-operator", + "image": "docker.io/istio/operator:1.11.4", + "command": [ + "operator", + "server" + ], + "env": [ + { + "name": "WATCH_NAMESPACE", + "value": "istio-system" + }, + { + "name": "LEADER_ELECTION_NAMESPACE", + "value": "istio-operator" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "OPERATOR_NAME", + "value": "istio-operator" + }, + { + "name": "WAIT_FOR_RESOURCES_TIMEOUT", + "value": "300s" + }, + { + "name": "REVISION" + } + ], + "resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-25w47", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "istio-operator", + "serviceAccount": "istio-operator", + "nodeName": "controller-0", + "securityContext": {}, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:39Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:30Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:30Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:39Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.83", + "podIPs": [ + { + "ip": "172.16.192.83" + } + ], + "startTime": "2021-11-25T19:24:39Z", + "containerStatuses": [ + { + "name": "istio-operator", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:29Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-09T14:46:00Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://4583982a70448d8b6655e530639d08872e6d9128bde363a690e329ded1cb336f" + } + }, + "ready": true, + "restartCount": 4, + "image": "docker.io/istio/operator:1.11.4", + "imageID": "docker.io/istio/operator@sha256:d6c0f4531ba1d745ec29579f3944270bf1879ebb966032b1b7413e5ac382811c", + "containerID": "containerd://240f5762b2fe67d2e8e2478b978aea036ed708446dcede5b72d8866504845f8a", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "jaeger-5d44bc5c5d-6w8zw", + "generateName": "jaeger-5d44bc5c5d-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/jaeger-5d44bc5c5d-6w8zw", + "uid": "1d986c79-dc98-4de7-b03f-cca572d0d834", + "resourceVersion": "4222494", + "creationTimestamp": "2021-12-01T13:24:42Z", + "labels": { + "app": "jaeger", + "pod-template-hash": "5d44bc5c5d" + }, + "annotations": { + "cni.projectcalico.org/podIP": "172.16.192.75/32", + "cni.projectcalico.org/podIPs": "172.16.192.75/32", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.75\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.75\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995212789Z", + "kubernetes.io/config.source": "api", + "prometheus.io/port": "14269", + "prometheus.io/scrape": "true", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "jaeger-5d44bc5c5d", + "uid": "36016c09-1de3-44b1-b525-c89fd5f0e71b", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"36016c09-1de3-44b1-b525-c89fd5f0e71b\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"jaeger\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"BADGER_DIRECTORY_KEY\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"BADGER_DIRECTORY_VALUE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"BADGER_EPHEMERAL\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"COLLECTOR_ZIPKIN_HOST_PORT\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"MEMORY_MAX_TRACES\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"QUERY_BASE_PATH\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"SPAN_STORAGE_TYPE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:requests": { + ".": {}, + "f:cpu": {} + } + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/badger\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"data\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:25:09Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.99\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "data", + "emptyDir": {} + }, + { + "name": "kube-api-access-kvtd5", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "jaeger", + "image": "docker.io/jaegertracing/all-in-one:1.23", + "env": [ + { + "name": "BADGER_EPHEMERAL", + "value": "false" + }, + { + "name": "SPAN_STORAGE_TYPE", + "value": "badger" + }, + { + "name": "BADGER_DIRECTORY_VALUE", + "value": "/badger/data" + }, + { + "name": "BADGER_DIRECTORY_KEY", + "value": "/badger/key" + }, + { + "name": "COLLECTOR_ZIPKIN_HOST_PORT", + "value": ":9411" + }, + { + "name": "MEMORY_MAX_TRACES", + "value": "50000" + }, + { + "name": "QUERY_BASE_PATH", + "value": "/jaeger" + } + ], + "resources": { + "requests": { + "cpu": "10m" + } + }, + "volumeMounts": [ + { + "name": "data", + "mountPath": "/badger" + }, + { + "name": "kube-api-access-kvtd5", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/", + "port": 14269, + "scheme": "HTTP" + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "readinessProbe": { + "httpGet": { + "path": "/", + "port": 14269, + "scheme": "HTTP" + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "default", + "serviceAccount": "default", + "nodeName": "controller-0", + "securityContext": {}, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:24Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:24Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.75", + "podIPs": [ + { + "ip": "172.16.192.75" + } + ], + "startTime": "2021-12-01T13:24:46Z", + "containerStatuses": [ + { + "name": "jaeger", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:24Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:08Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://3de4283afb39200026acf394cf6b37811e8f8d2d772ec4b36d0c89bbd3c860f3" + } + }, + "ready": true, + "restartCount": 1, + "image": "docker.io/jaegertracing/all-in-one:1.23", + "imageID": "docker.io/jaegertracing/all-in-one@sha256:85a10441bd1271fff53d1d80e174567d41ab596c5e82f7034e20996c7b6f20d1", + "containerID": "containerd://52aaaa332e2e400e93c62ac3764dfe7f1f8f37abf9d70ef877acc86e51e577ba", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "ms-metrics-server-6595d65c86-n9kmj", + "generateName": "ms-metrics-server-6595d65c86-", + "namespace": "metrics-server", + "selfLink": "/api/v1/namespaces/metrics-server/pods/ms-metrics-server-6595d65c86-n9kmj", + "uid": "f76247b9-5549-4917-ab80-df3d1ca0ef5f", + "resourceVersion": "8255484", + "creationTimestamp": "2022-01-16T16:50:57Z", + "labels": { + "app": "metrics-server", + "app.kubernetes.io/instance": "ms-metrics-server", + "app.kubernetes.io/name": "metrics-server", + "pod-template-hash": "6595d65c86" + }, + "annotations": { + "cni.projectcalico.org/podIP": "172.16.192.114/32", + "cni.projectcalico.org/podIPs": "172.16.192.114/32", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.114\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.114\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:57.814310068Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "ms-metrics-server-6595d65c86", + "uid": "a3938bb1-b5a0-4674-b572-8f171cde96d0", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2022-01-16T16:50:57Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:app.kubernetes.io/instance": {}, + "f:app.kubernetes.io/name": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"a3938bb1-b5a0-4674-b572-8f171cde96d0\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"metrics-server\"}": { + ".": {}, + "f:args": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":4443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:drop": {} + }, + "f:readOnlyRootFilesystem": {}, + "f:runAsGroup": {}, + "f:runAsNonRoot": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"default-registry-key\"}": { + ".": {}, + "f:name": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:priorityClassName": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "tmp", + "emptyDir": {} + }, + { + "name": "kube-api-access-st42n", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "metrics-server", + "image": "registry.local:9001/k8s.gcr.io/metrics-server/metrics-server:v0.4.1", + "args": [ + "--cert-dir=/tmp", + "--secure-port=4443", + "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", + "--kubelet-use-node-status-port", + "--logtostderr", + "--kubelet-insecure-tls" + ], + "ports": [ + { + "name": "https", + "containerPort": 4443, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "tmp", + "mountPath": "/tmp" + }, + { + "name": "kube-api-access-st42n", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/healthz", + "port": "https", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 20, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "readinessProbe": { + "httpGet": { + "path": "/healthz", + "port": "https", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 20, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "all" + ] + }, + "runAsUser": 10001, + "runAsGroup": 10001, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "ms-metrics-server", + "serviceAccount": "ms-metrics-server", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priorityClassName": "system-cluster-critical", + "priority": 2000000000, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:57Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:51:27Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:51:27Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:57Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.114", + "podIPs": [ + { + "ip": "172.16.192.114" + } + ], + "startTime": "2022-01-16T16:50:57Z", + "containerStatuses": [ + { + "name": "metrics-server", + "state": { + "running": { + "startedAt": "2022-01-16T16:51:05Z" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "registry.local:9001/k8s.gcr.io/metrics-server/metrics-server:v0.4.1", + "imageID": "registry.local:9001/k8s.gcr.io/metrics-server/metrics-server@sha256:2009bb9ca86e8bdfc035a37561cf062f3e051c35823a5481fbd13533ce402fac", + "containerID": "containerd://3c7bbc68f345eb60b0770f059a1f086624d1e86ddd2ff114b16265dc07439c7f", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "kube-sriov-cni-ds-amd64-zgkb7", + "generateName": "kube-sriov-cni-ds-amd64-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/kube-sriov-cni-ds-amd64-zgkb7", + "uid": "f52d8f1a-e1f4-44ae-a111-f24492276470", + "resourceVersion": "4222712", + "creationTimestamp": "2021-11-17T17:02:03Z", + "labels": { + "app": "sriov-cni", + "controller-revision-hash": "7fbc59bf8c", + "name": "sriov-cni", + "pod-template-generation": "1", + "tier": "node" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.107\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.107\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995205823Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "DaemonSet", + "name": "kube-sriov-cni-ds-amd64", + "uid": "9e3b5540-ba52-4b2d-8875-d11edb303383", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:controller-revision-hash": {}, + "f:name": {}, + "f:pod-template-generation": {}, + "f:tier": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"9e3b5540-ba52-4b2d-8875-d11edb303383\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"kube-sriov-cni\"}": { + ".": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": { + ".": {}, + "f:limits": { + ".": {}, + "f:memory": {} + }, + "f:requests": { + ".": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:drop": {} + }, + "f:privileged": {}, + "f:readOnlyRootFilesystem": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/host/opt/cni/bin\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"registry-local-secret\"}": { + ".": {}, + "f:name": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:beta.kubernetes.io/arch": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"cnibin\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:21Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:21Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:30Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.91\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "cnibin", + "hostPath": { + "path": "/usr/libexec/cni", + "type": "" + } + }, + { + "name": "kube-api-access-6ttwm", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "kube-sriov-cni", + "image": "registry.local:9001/ghcr.io/k8snetworkplumbingwg/sriov-cni:v2.6.1", + "resources": { + "limits": { + "memory": "50Mi" + }, + "requests": { + "memory": "50Mi" + } + }, + "volumeMounts": [ + { + "name": "cnibin", + "mountPath": "/host/opt/cni/bin" + }, + { + "name": "kube-api-access-6ttwm", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "beta.kubernetes.io/arch": "amd64" + }, + "serviceAccountName": "default", + "serviceAccount": "default", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "registry-local-secret" + } + ], + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchFields": [ + { + "key": "metadata.name", + "operator": "In", + "values": [ + "controller-0" + ] + } + ] + } + ] + } + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/disk-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/memory-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/pid-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/unschedulable", + "operator": "Exists", + "effect": "NoSchedule" + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:03Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:16Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:16Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:03Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.107", + "podIPs": [ + { + "ip": "172.16.192.107" + } + ], + "startTime": "2021-11-17T17:02:03Z", + "containerStatuses": [ + { + "name": "kube-sriov-cni", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:15Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:30Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://4f405c9712ac4f0da42125cb915bdccea4efdbb5e05de70e7fe40de28c0bb976" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/ghcr.io/k8snetworkplumbingwg/sriov-cni:v2.6.1", + "imageID": "registry.local:9001/ghcr.io/k8snetworkplumbingwg/sriov-cni@sha256:39e33677b68365e2da4e7f0bc5944a7e6f3ddf9c401330d1e4d2ef74d06eb529", + "containerID": "containerd://3da110ebc0f7dfdd5801d51d3a74d3499b914961a98d35b5978bc8062b68d9f2", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "cm-cert-manager-cainjector-ccfbc7b65-gfd4g", + "generateName": "cm-cert-manager-cainjector-ccfbc7b65-", + "namespace": "cert-manager", + "selfLink": "/api/v1/namespaces/cert-manager/pods/cm-cert-manager-cainjector-ccfbc7b65-gfd4g", + "uid": "350e5acb-7c2a-41d2-ba07-c2b8c450435f", + "resourceVersion": "4221922", + "creationTimestamp": "2021-11-17T17:08:38Z", + "labels": { + "app": "cainjector", + "app.kubernetes.io/component": "cainjector", + "app.kubernetes.io/instance": "cm-cert-manager", + "app.kubernetes.io/managed-by": "Tiller", + "app.kubernetes.io/name": "cainjector", + "helm.sh/chart": "cert-manager-v0.1.0", + "pod-template-hash": "ccfbc7b65" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.78\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.78\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995195202Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "cm-cert-manager-cainjector-ccfbc7b65", + "uid": "5c03d6f1-f491-449d-8a9e-9c6faf449c66", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:38Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:app.kubernetes.io/component": {}, + "f:app.kubernetes.io/instance": {}, + "f:app.kubernetes.io/managed-by": {}, + "f:app.kubernetes.io/name": {}, + "f:helm.sh/chart": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"5c03d6f1-f491-449d-8a9e-9c6faf449c66\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"cert-manager\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:39Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:39Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:28Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.67\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-mgtj9", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "cert-manager", + "image": "registry.local:9001/quay.io/jetstack/cert-manager-cainjector:v0.15.0", + "args": [ + "--v=2", + "--leader-election-namespace=kube-system" + ], + "env": [ + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-mgtj9", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "cm-cert-manager-cainjector", + "serviceAccount": "cm-cert-manager-cainjector", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "podAntiAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": [ + { + "labelSelector": { + "matchExpressions": [ + { + "key": "app", + "operator": "In", + "values": [ + "cainjector" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:08:38Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:29Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:29Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:08:38Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.78", + "podIPs": [ + { + "ip": "172.16.192.78" + } + ], + "startTime": "2021-11-17T17:08:38Z", + "containerStatuses": [ + { + "name": "cert-manager", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:28Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-09T14:45:59Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://634f6a6718efb29654b5f308f941bb5e024982a8e21ee5f7d97b6e4d43590fde" + } + }, + "ready": true, + "restartCount": 7, + "image": "registry.local:9001/quay.io/jetstack/cert-manager-cainjector:v0.15.0", + "imageID": "registry.local:9001/quay.io/jetstack/cert-manager-cainjector@sha256:b9bcec6971698150cba13be8ff357bcad86deada88215e1e53d4bec17d0cd423", + "containerID": "containerd://0db3495b7ce73f0c90a0dbcee338a2911c389bb81d62dd1655bc0f1afb8448e1", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "details-v1-79f774bdb9-cjpw7", + "generateName": "details-v1-79f774bdb9-", + "namespace": "default", + "selfLink": "/api/v1/namespaces/default/pods/details-v1-79f774bdb9-cjpw7", + "uid": "a79e04a9-832c-46dd-8706-a3fe6e2cd0bb", + "resourceVersion": "4222616", + "creationTimestamp": "2021-12-01T13:24:42Z", + "labels": { + "app": "details", + "pod-template-hash": "79f774bdb9", + "security.istio.io/tlsMode": "istio", + "service.istio.io/canonical-name": "details", + "service.istio.io/canonical-revision": "v1", + "version": "v1" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.97\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks": "istio-cni", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.97\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "kubectl.kubernetes.io/default-container": "details", + "kubectl.kubernetes.io/default-logs-container": "details", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995192902Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/interceptionMode": "REDIRECT", + "sidecar.istio.io/status": "{\"initContainers\":[\"istio-validation\"],\"containers\":[\"istio-proxy\"],\"volumes\":[\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istio-token\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"default\"}", + "traffic.sidecar.istio.io/excludeInboundPorts": "15020", + "traffic.sidecar.istio.io/includeInboundPorts": "*", + "traffic.sidecar.istio.io/includeOutboundIPRanges": "*" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "details-v1-79f774bdb9", + "uid": "63723d39-270a-49de-a677-feb3c58f8eac", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"63723d39-270a-49de-a677-feb3c58f8eac\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"details\"}": { + ".": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:25:26Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.97\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istio-envoy", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "kube-api-access-pj9jj", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "istio-validation", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "istio-iptables", + "-p", + "15001", + "-z", + "15006", + "-u", + "1337", + "-m", + "REDIRECT", + "-i", + "*", + "-x", + "", + "-b", + "*", + "-d", + "15090,15021,15020", + "--run-validation", + "--skip-rule-apply" + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-pj9jj", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "details", + "image": "docker.io/istio/examples-bookinfo-details-v1:1.16.2", + "ports": [ + { + "containerPort": 9080, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-pj9jj", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 1000 + } + }, + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "sidecar", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info", + "--concurrency", + "2" + ], + "ports": [ + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "PROXY_CONFIG", + "value": "{}\n" + }, + { + "name": "ISTIO_META_POD_PORTS", + "value": "[\n {\"containerPort\":9080,\"protocol\":\"TCP\"}\n]" + }, + { + "name": "ISTIO_META_APP_CONTAINERS", + "value": "details" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + }, + { + "name": "ISTIO_META_INTERCEPTION_MODE", + "value": "REDIRECT" + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "details-v1" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/default/deployments/details-v1" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "istio-token", + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "kube-api-access-pj9jj", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 3, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "bookinfo-details", + "serviceAccount": "bookinfo-details", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:50Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [details istio-proxy]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [details istio-proxy]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "startTime": "2021-12-01T13:24:46Z", + "initContainerStatuses": [ + { + "name": "istio-validation", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2021-12-01T13:24:50Z", + "finishedAt": "2021-12-01T13:24:50Z", + "containerID": "containerd://0711409357e3411d098992d7841b082519a0b4974271ce7a01c0a9e2bef84b67" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://0711409357e3411d098992d7841b082519a0b4974271ce7a01c0a9e2bef84b67" + } + ], + "containerStatuses": [ + { + "name": "details", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:23Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://7ca8095d1bb24d639d472bf0d21bb2142955b48a2948b3f6605ca723bd870c5d" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/examples-bookinfo-details-v1:1.16.2", + "imageID": "docker.io/istio/examples-bookinfo-details-v1@sha256:18e54f81689035019e1ac78f6d2e6483fcf1d94072d047315ab193cb2ab89ae5", + "containerID": "containerd://7ca8095d1bb24d639d472bf0d21bb2142955b48a2948b3f6605ca723bd870c5d", + "started": false + }, + { + "name": "istio-proxy", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:24Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://1e53ed1c330048207bbb9f49268fcb11f0cfc6457c2354475628307a650186da" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://1e53ed1c330048207bbb9f49268fcb11f0cfc6457c2354475628307a650186da", + "started": false + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "prometheus-77b49cb997-wngk2", + "generateName": "prometheus-77b49cb997-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/prometheus-77b49cb997-wngk2", + "uid": "e4f11277-c5c6-4ee9-868b-d668c8c4dba1", + "resourceVersion": "4222819", + "creationTimestamp": "2021-12-01T13:24:42Z", + "labels": { + "app": "prometheus", + "chart": "prometheus-14.3.0", + "component": "server", + "heritage": "Helm", + "pod-template-hash": "77b49cb997", + "release": "prometheus" + }, + "annotations": { + "cni.projectcalico.org/podIP": "172.16.192.106/32", + "cni.projectcalico.org/podIPs": "172.16.192.106/32", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.106\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.106\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995190445Z", + "kubernetes.io/config.source": "api", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "prometheus-77b49cb997", + "uid": "2513e794-6f81-4270-908a-c6423a9eef4c", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:chart": {}, + "f:component": {}, + "f:heritage": {}, + "f:pod-template-hash": {}, + "f:release": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"2513e794-6f81-4270-908a-c6423a9eef4c\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"prometheus-server\"}": { + ".": {}, + "f:args": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9090,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/data\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/etc/config\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"prometheus-server-configmap-reload\"}": { + ".": {}, + "f:args": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/config\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": { + ".": {}, + "f:fsGroup": {}, + "f:runAsGroup": {}, + "f:runAsNonRoot": {}, + "f:runAsUser": {} + }, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"config-volume\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"storage-volume\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:54Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:54Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:25:56Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.104\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "config-volume", + "configMap": { + "name": "prometheus", + "defaultMode": 420 + } + }, + { + "name": "storage-volume", + "emptyDir": {} + }, + { + "name": "kube-api-access-76xb5", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "prometheus-server-configmap-reload", + "image": "jimmidyson/configmap-reload:v0.5.0", + "args": [ + "--volume-dir=/etc/config", + "--webhook-url=http://127.0.0.1:9090/-/reload" + ], + "resources": {}, + "volumeMounts": [ + { + "name": "config-volume", + "readOnly": true, + "mountPath": "/etc/config" + }, + { + "name": "kube-api-access-76xb5", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + }, + { + "name": "prometheus-server", + "image": "prom/prometheus:v2.26.0", + "args": [ + "--storage.tsdb.retention.time=15d", + "--config.file=/etc/config/prometheus.yml", + "--storage.tsdb.path=/data", + "--web.console.libraries=/etc/prometheus/console_libraries", + "--web.console.templates=/etc/prometheus/consoles", + "--web.enable-lifecycle" + ], + "ports": [ + { + "containerPort": 9090, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "config-volume", + "mountPath": "/etc/config" + }, + { + "name": "storage-volume", + "mountPath": "/data" + }, + { + "name": "kube-api-access-76xb5", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/-/healthy", + "port": 9090, + "scheme": "HTTP" + }, + "initialDelaySeconds": 30, + "timeoutSeconds": 10, + "periodSeconds": 15, + "successThreshold": 1, + "failureThreshold": 3 + }, + "readinessProbe": { + "httpGet": { + "path": "/-/ready", + "port": 9090, + "scheme": "HTTP" + }, + "timeoutSeconds": 4, + "periodSeconds": 5, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 300, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "prometheus", + "serviceAccount": "prometheus", + "nodeName": "controller-0", + "securityContext": { + "runAsUser": 65534, + "runAsGroup": 65534, + "runAsNonRoot": true, + "fsGroup": 65534 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:52Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:52Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.106", + "podIPs": [ + { + "ip": "172.16.192.106" + } + ], + "startTime": "2021-12-01T13:24:46Z", + "containerStatuses": [ + { + "name": "prometheus-server", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:14Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:56Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://32ba6d99c75506615896b54cdab16293f60fa220061f5e8777b7f5aadd8ffcc1" + } + }, + "ready": true, + "restartCount": 1, + "image": "docker.io/prom/prometheus:v2.26.0", + "imageID": "docker.io/prom/prometheus@sha256:38d40a760569b1c5aec4a36e8a7f11e86299e9191b9233672a5d41296d8fa74e", + "containerID": "containerd://92d847e1f0b8f60ecd87a61e6d399504842d1bd34bc398d98be0a0b22a0d7c3f", + "started": true + }, + { + "name": "prometheus-server-configmap-reload", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:13Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:48Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://3a5b49cf5c5a9a2d973d2524d0522cedc5cb01581ecd2fb1c48f754eee78d95b" + } + }, + "ready": true, + "restartCount": 1, + "image": "docker.io/jimmidyson/configmap-reload:v0.5.0", + "imageID": "docker.io/jimmidyson/configmap-reload@sha256:904d08e9f701d3d8178cb61651dbe8edc5d08dd5895b56bdcac9e5805ea82b52", + "containerID": "containerd://5cb3e8ee8146657b392763610d3b7a5fead9a99dfbe54e4c729f6148ab7718c1", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "armada-api-554fc4ffdc-knktn", + "generateName": "armada-api-554fc4ffdc-", + "namespace": "armada", + "selfLink": "/api/v1/namespaces/armada/pods/armada-api-554fc4ffdc-knktn", + "uid": "2414f4af-1ee3-4f8b-af79-9a17b3247671", + "resourceVersion": "4222194", + "creationTimestamp": "2021-11-17T17:02:11Z", + "labels": { + "application": "armada", + "component": "api", + "pod-template-hash": "554fc4ffdc", + "release_group": "armada" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "configmap-bin-hash": "18bd6a6f166ebd091de412ec635cc785b5eaff9e26242fa0e8c77bb0d88046b0", + "configmap-etc-hash": "0196a2b125d15f739c2a432c12b290e6825ecc6c7ccd7eae2ff3e5415b53dd42", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.76\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.76\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995200313Z", + "kubernetes.io/config.source": "api", + "openstackhelm.openstack.org/release_uuid": "", + "prometheus.io/path": "/api/v1.0/metrics", + "prometheus.io/port": "8000", + "prometheus.io/scrape": "true" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "armada-api-554fc4ffdc", + "uid": "362fbeaf-2889-4669-bfb9-31b1f5bb30de", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:11Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:configmap-bin-hash": {}, + "f:configmap-etc-hash": {}, + "f:openstackhelm.openstack.org/release_uuid": {}, + "f:prometheus.io/path": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:application": {}, + "f:component": {}, + "f:pod-template-hash": {}, + "f:release_group": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"362fbeaf-2889-4669-bfb9-31b1f5bb30de\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:preferredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"armada-api\"}": { + ".": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:readOnlyRootFilesystem": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/armada\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/etc/armada/api-paste.ini\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {}, + "f:subPath": {} + }, + "k:{\"mountPath\":\"/etc/armada/armada.conf\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {}, + "f:subPath": {} + }, + "k:{\"mountPath\":\"/etc/armada/policy.yaml\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {}, + "f:subPath": {} + }, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"tiller\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"TILLER_HISTORY_MAX\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"TILLER_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:lifecycle": { + ".": {}, + "f:postStart": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + } + }, + "f:preStop": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + } + } + }, + "f:livenessProbe": { + ".": {}, + "f:exec": { + ".": {}, + "f:command": {} + }, + "f:failureThreshold": {}, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":24134,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:readOnlyRootFilesystem": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/tmp/.kube\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:initContainers": { + ".": {}, + "k:{\"name\":\"init\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"COMMAND\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"DEPENDENCY_CONTAINER\"}": { + ".": {}, + "f:name": {} + }, + "k:{\"name\":\"DEPENDENCY_CUSTOM_RESOURCE\"}": { + ".": {}, + "f:name": {} + }, + "k:{\"name\":\"DEPENDENCY_DAEMONSET\"}": { + ".": {}, + "f:name": {} + }, + "k:{\"name\":\"DEPENDENCY_POD_JSON\"}": { + ".": {}, + "f:name": {} + }, + "k:{\"name\":\"DEPENDENCY_SERVICE\"}": { + ".": {}, + "f:name": {} + }, + "k:{\"name\":\"INTERFACE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"PATH\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"POD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:readOnlyRootFilesystem": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:armada": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"armada-bin\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"armada-etc\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"kubernetes-client-cache\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"pod-etc-armada\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"pod-tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"tiller-tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:12Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:12Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:45Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.87\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "pod-tmp", + "emptyDir": {} + }, + { + "name": "pod-etc-armada", + "emptyDir": {} + }, + { + "name": "armada-bin", + "configMap": { + "name": "armada-bin", + "defaultMode": 365 + } + }, + { + "name": "armada-etc", + "configMap": { + "name": "armada-etc", + "defaultMode": 292 + } + }, + { + "name": "kubernetes-client-cache", + "emptyDir": {} + }, + { + "name": "tiller-tmp", + "emptyDir": {} + }, + { + "name": "kube-api-access-zm424", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "init", + "image": "registry.local:9001/quay.io/stackanetes/kubernetes-entrypoint:v0.3.1", + "command": [ + "kubernetes-entrypoint" + ], + "env": [ + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INTERFACE_NAME", + "value": "eth0" + }, + { + "name": "PATH", + "value": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/" + }, + { + "name": "DEPENDENCY_SERVICE" + }, + { + "name": "DEPENDENCY_DAEMONSET" + }, + { + "name": "DEPENDENCY_CONTAINER" + }, + { + "name": "DEPENDENCY_POD_JSON" + }, + { + "name": "DEPENDENCY_CUSTOM_RESOURCE" + }, + { + "name": "COMMAND", + "value": "echo done" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-zm424", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "armada-api", + "image": "registry.local:9001/quay.io/airshipit/armada:7ef4b8643b5ec5216a8f6726841e156c0aa54a1a-ubuntu_bionic", + "ports": [ + { + "name": "armada-api", + "containerPort": 8000, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "pod-tmp", + "mountPath": "/tmp" + }, + { + "name": "pod-etc-armada", + "mountPath": "/etc/armada" + }, + { + "name": "armada-etc", + "readOnly": true, + "mountPath": "/etc/armada/armada.conf", + "subPath": "armada.conf" + }, + { + "name": "armada-etc", + "readOnly": true, + "mountPath": "/etc/armada/api-paste.ini", + "subPath": "api-paste.ini" + }, + { + "name": "armada-etc", + "readOnly": true, + "mountPath": "/etc/armada/policy.yaml", + "subPath": "policy.yaml" + }, + { + "name": "kube-api-access-zm424", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + }, + { + "name": "tiller", + "image": "registry.local:9001/ghcr.io/helm/tiller:v2.16.9", + "command": [ + "sh", + "-c", + "/bin/sh \u003c\u003c'EOF'\nwhile ! /bin/busybox nc -vz -w 1 192.168.204.1 5432; do continue; done;\n/tiller \\\n--storage=sql \\\n--sql-dialect=postgres \\\n--sql-connection-string=postgresql://admin-helmv2:k-9uDKGrmjJfX7hl@192.168.204.1:5432/helmv2?sslmode=disable \\\n-listen \":24134\" \\\n-probe-listen \":24135\" \\\n-logtostderr \\\n-v \"5\" \\\n EOF\n" + ], + "ports": [ + { + "name": "tiller", + "containerPort": 24134, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "TILLER_NAMESPACE", + "value": "kube-system" + }, + { + "name": "TILLER_HISTORY_MAX", + "value": "0" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "tiller-tmp", + "mountPath": "/tmp" + }, + { + "name": "kubernetes-client-cache", + "mountPath": "/tmp/.kube" + }, + { + "name": "kube-api-access-zm424", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "exec": { + "command": [ + "nc", + "-vz", + "-w", + "1", + "192.168.204.1", + "5432" + ] + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 1, + "periodSeconds": 4, + "successThreshold": 1, + "failureThreshold": 2 + }, + "readinessProbe": { + "httpGet": { + "path": "/readiness", + "port": 24135, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "lifecycle": { + "postStart": { + "exec": { + "command": [ + "sh", + "-c", + "/bin/sh \u003c\u003c'EOF'\n# Delay initialization since postStart handler runs asynchronously and there\n# is no guarantee it is called before the Container’s entrypoint.\nsleep 5\n# Initialize Helm v2 client.\nexport HELM_HOST=:24134\n/helm init --client-only --skip-refresh\n\n# Moving the ln up so eventual errors on the next commands doesn't prevent\n# having helm available\nln -s -f /helm /tmp/helm\n\n# Removes all repos available so we don't get an error removing what\n# doesn't exist anymore or error re-adding an existing repo\n/helm repo list | awk '(NR\u003e1){print $1}' | xargs --no-run-if-empty /helm repo rm\n/helm repo add starlingx http://192.168.204.1:8080/helm_charts/starlingx\n/helm repo add stx-platform http://192.168.204.1:8080/helm_charts/stx-platform\nexit 0\nEOF\n" + ] + } + }, + "preStop": { + "exec": { + "command": [ + "sleep", + "30" + ] + } + } + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 65534, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "armada": "enabled" + }, + "serviceAccountName": "armada-api", + "serviceAccount": "armada-api", + "nodeName": "controller-0", + "securityContext": { + "runAsUser": 1000 + }, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "podAntiAffinity": { + "preferredDuringSchedulingIgnoredDuringExecution": [ + { + "weight": 10, + "podAffinityTerm": { + "labelSelector": { + "matchExpressions": [ + { + "key": "release_group", + "operator": "In", + "values": [ + "armada" + ] + }, + { + "key": "application", + "operator": "In", + "values": [ + "armada" + ] + }, + { + "key": "component", + "operator": "In", + "values": [ + "api" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:31Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:45Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:45Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:11Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.76", + "podIPs": [ + { + "ip": "172.16.192.76" + } + ], + "startTime": "2021-11-17T17:02:11Z", + "initContainerStatuses": [ + { + "name": "init", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2022-01-16T16:50:29Z", + "finishedAt": "2022-01-16T16:50:30Z", + "containerID": "containerd://0ab7438e4af82fe5a691bc6db34ab17f2186fadac88ecacf83f643871a4a39b7" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/quay.io/stackanetes/kubernetes-entrypoint:v0.3.1", + "imageID": "registry.local:9001/quay.io/stackanetes/kubernetes-entrypoint@sha256:2cad635d9079ee130f7f288b2ffb9c65c90fc7711364dcf438973ddf579b7fed", + "containerID": "containerd://0ab7438e4af82fe5a691bc6db34ab17f2186fadac88ecacf83f643871a4a39b7" + } + ], + "containerStatuses": [ + { + "name": "armada-api", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:32Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:32Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://d4c1a4fa707a5dc42bc04e1c75e0e0acc8f381b4314a4c8052e8a4ee449b761a" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/quay.io/airshipit/armada:7ef4b8643b5ec5216a8f6726841e156c0aa54a1a-ubuntu_bionic", + "imageID": "registry.local:9001/quay.io/airshipit/armada@sha256:197b0ae32810341179dc20690d7fbe8a95eada4327892d7cbc5d501332f86940", + "containerID": "containerd://15969fed1544fa7bae88027c65bc308a9b9b7f43b8a67bc02265119d96276058", + "started": true + }, + { + "name": "tiller", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:33Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:33Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://edf2e2c0861a2ed47c4addcb6d69cea5505d5b1bf4cef33b9246ee972e8d0e5f" + } + }, + "ready": true, + "restartCount": 9, + "image": "registry.local:9001/ghcr.io/helm/tiller:v2.16.9", + "imageID": "registry.local:9001/ghcr.io/helm/tiller@sha256:89a693dfecd029474862d4ae1a646730114c1bf2d9f659f1d17cdfaa63fdf05c", + "containerID": "containerd://bf0d265296ec61ebc37d709f738d9708d766936233c28f57453aa9fa0deb7c59", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "kiali-fd9f88575-mqcqn", + "generateName": "kiali-fd9f88575-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/kiali-fd9f88575-mqcqn", + "uid": "ece47636-ae3a-44d5-95e5-ebbb2b783737", + "resourceVersion": "4222742", + "creationTimestamp": "2021-12-01T13:24:43Z", + "labels": { + "app": "kiali", + "app.kubernetes.io/instance": "kiali", + "app.kubernetes.io/managed-by": "Helm", + "app.kubernetes.io/name": "kiali", + "app.kubernetes.io/part-of": "kiali", + "app.kubernetes.io/version": "v1.38.0", + "helm.sh/chart": "kiali-server-1.38.0", + "pod-template-hash": "fd9f88575", + "version": "v1.38.0" + }, + "annotations": { + "cni.projectcalico.org/podIP": "172.16.192.82/32", + "cni.projectcalico.org/podIPs": "172.16.192.82/32", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.82\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.82\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kiali.io/dashboards": "go,kiali", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995228887Z", + "kubernetes.io/config.source": "api", + "prometheus.io/port": "9090", + "prometheus.io/scrape": "true", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "kiali-fd9f88575", + "uid": "f7d26da9-3477-437c-9715-cae3f3d874fa", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:43Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:kiali.io/dashboards": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:app.kubernetes.io/instance": {}, + "f:app.kubernetes.io/managed-by": {}, + "f:app.kubernetes.io/name": {}, + "f:app.kubernetes.io/part-of": {}, + "f:app.kubernetes.io/version": {}, + "f:helm.sh/chart": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"f7d26da9-3477-437c-9715-cae3f3d874fa\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"kiali\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"ACTIVE_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"LOG_FORMAT\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"LOG_LEVEL\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"LOG_SAMPLER_RATE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"LOG_TIME_FIELD_FORMAT\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9090,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":20001,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:privileged": {}, + "f:readOnlyRootFilesystem": {}, + "f:runAsNonRoot": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/kiali-cabundle\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/kiali-cert\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/kiali-configuration\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/kiali-secret\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"kiali-cabundle\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {}, + "f:optional": {} + }, + "f:name": {} + }, + "k:{\"name\":\"kiali-cert\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"kiali-configuration\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"kiali-secret\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:51Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:52Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:25:46Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.101\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kiali-configuration", + "configMap": { + "name": "kiali", + "defaultMode": 420 + } + }, + { + "name": "kiali-cert", + "secret": { + "secretName": "istio.kiali-service-account", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "kiali-secret", + "secret": { + "secretName": "kiali", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "kiali-cabundle", + "configMap": { + "name": "kiali-cabundle", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "kube-api-access-njkml", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "kiali", + "image": "quay.io/kiali/kiali:v1.38", + "command": [ + "/opt/kiali/kiali", + "-config", + "/kiali-configuration/config.yaml" + ], + "ports": [ + { + "name": "api-port", + "containerPort": 20001, + "protocol": "TCP" + }, + { + "name": "http-metrics", + "containerPort": 9090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "ACTIVE_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "LOG_LEVEL", + "value": "info" + }, + { + "name": "LOG_FORMAT", + "value": "text" + }, + { + "name": "LOG_TIME_FIELD_FORMAT", + "value": "2006-01-02T15:04:05Z07:00" + }, + { + "name": "LOG_SAMPLER_RATE", + "value": "1" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kiali-configuration", + "mountPath": "/kiali-configuration" + }, + { + "name": "kiali-cert", + "mountPath": "/kiali-cert" + }, + { + "name": "kiali-secret", + "mountPath": "/kiali-secret" + }, + { + "name": "kiali-cabundle", + "mountPath": "/kiali-cabundle" + }, + { + "name": "kube-api-access-njkml", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/kiali/healthz", + "port": "api-port", + "scheme": "HTTP" + }, + "initialDelaySeconds": 5, + "timeoutSeconds": 1, + "periodSeconds": 30, + "successThreshold": 1, + "failureThreshold": 3 + }, + "readinessProbe": { + "httpGet": { + "path": "/kiali/healthz", + "port": "api-port", + "scheme": "HTTP" + }, + "initialDelaySeconds": 5, + "timeoutSeconds": 1, + "periodSeconds": 30, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "Always", + "securityContext": { + "privileged": false, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "kiali", + "serviceAccount": "kiali", + "nodeName": "controller-0", + "securityContext": {}, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:51:02Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:51:02Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.82", + "podIPs": [ + { + "ip": "172.16.192.82" + } + ], + "startTime": "2021-12-01T13:24:46Z", + "containerStatuses": [ + { + "name": "kiali", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:30Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:33Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://b6c852dfbbed46761cee8e16263142d48e4099e08c155b834ab24f5be20137c8" + } + }, + "ready": true, + "restartCount": 1, + "image": "quay.io/kiali/kiali:v1.38", + "imageID": "quay.io/kiali/kiali@sha256:2d4e04aa5348dd20cbf894eb43d257cfa99cd4c43f30b1497726cc06b535fe72", + "containerID": "containerd://10af7eb5de8a33d314b663257a11e8785f609d80b5c19291e96c302a0fffcd85", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "kube-multus-ds-amd64-kpnvx", + "generateName": "kube-multus-ds-amd64-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/kube-multus-ds-amd64-kpnvx", + "uid": "9c381112-8723-4f34-9329-902b42100af9", + "resourceVersion": "4221600", + "creationTimestamp": "2021-11-22T21:54:41Z", + "labels": { + "app": "multus", + "controller-revision-hash": "74d948fbd9", + "name": "multus", + "pod-template-generation": "1", + "tier": "node" + }, + "annotations": { + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995211698Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "DaemonSet", + "name": "kube-multus-ds-amd64", + "uid": "3aed3263-87e7-456a-9ecb-1a60b12ced20", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-22T21:54:41Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:controller-revision-hash": {}, + "f:name": {}, + "f:pod-template-generation": {}, + "f:tier": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"3aed3263-87e7-456a-9ecb-1a60b12ced20\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"kube-multus\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"KUBERNETES_NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": { + ".": {}, + "f:limits": { + ".": {}, + "f:memory": {} + }, + "f:requests": { + ".": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:privileged": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/host/etc/cni/net.d\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/host/opt/cni/bin\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/tmp/multus-conf\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:hostNetwork": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"registry-local-secret\"}": { + ".": {}, + "f:name": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/arch": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"cni\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"cnibin\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"multus-cfg\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:items": {}, + "f:name": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:16Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"192.168.204.2\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "cni", + "hostPath": { + "path": "/etc/cni/net.d", + "type": "" + } + }, + { + "name": "cnibin", + "hostPath": { + "path": "/usr/libexec/cni", + "type": "" + } + }, + { + "name": "multus-cfg", + "configMap": { + "name": "multus-cni-config.v1", + "items": [ + { + "key": "cni-conf.json", + "path": "05-multus.conf" + } + ], + "defaultMode": 420 + } + }, + { + "name": "kube-api-access-hh9kq", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "kube-multus", + "image": "registry.local:9001/ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1", + "command": [ + "/bin/bash", + "-cex", + "#!/bin/bash\nsed \"s|__KUBERNETES_NODE_NAME__|${KUBERNETES_NODE_NAME}|g\" /tmp/multus-conf/05-multus.conf \u003e /usr/src/multus-cni/images/05-multus.conf\n/entrypoint.sh --multus-conf-file=/usr/src/multus-cni/images/05-multus.conf\n" + ], + "env": [ + { + "name": "KUBERNETES_NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + } + ], + "resources": { + "limits": { + "memory": "50Mi" + }, + "requests": { + "memory": "50Mi" + } + }, + "volumeMounts": [ + { + "name": "cni", + "mountPath": "/host/etc/cni/net.d" + }, + { + "name": "cnibin", + "mountPath": "/host/opt/cni/bin" + }, + { + "name": "multus-cfg", + "mountPath": "/tmp/multus-conf" + }, + { + "name": "kube-api-access-hh9kq", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "privileged": true + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 10, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "kubernetes.io/arch": "amd64" + }, + "serviceAccountName": "multus", + "serviceAccount": "multus", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "registry-local-secret" + } + ], + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchFields": [ + { + "key": "metadata.name", + "operator": "In", + "values": [ + "controller-0" + ] + } + ] + } + ] + } + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/disk-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/memory-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/pid-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/unschedulable", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/network-unavailable", + "operator": "Exists", + "effect": "NoSchedule" + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-22T21:54:41Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:17Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:17Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-22T21:54:41Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2021-11-22T21:54:41Z", + "containerStatuses": [ + { + "name": "kube-multus", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:16Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:15Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://c91c0d3fcd15cbc89868f5a32fd56f70fe7fb71687dfdca6ed2cd48ad6ce973e" + } + }, + "ready": true, + "restartCount": 2, + "image": "registry.local:9001/ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1", + "imageID": "registry.local:9001/ghcr.io/k8snetworkplumbingwg/multus-cni@sha256:00497eea52b0eeedb5257409b29f24f3696aac4687aa97e86b2e17890b93aaf3", + "containerID": "containerd://9cea13c2538cf57d10803baddc640062b7a59ba64afd86f1a34127648b675e83", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "istiod-6c86784695-z5x9g", + "generateName": "istiod-6c86784695-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/istiod-6c86784695-z5x9g", + "uid": "d0f052d3-027a-42dc-adda-421c205d2604", + "resourceVersion": "4221827", + "creationTimestamp": "2021-11-25T19:24:38Z", + "labels": { + "app": "istiod", + "install.operator.istio.io/owning-resource": "unknown", + "istio": "pilot", + "istio.io/rev": "default", + "operator.istio.io/component": "Pilot", + "pod-template-hash": "6c86784695", + "sidecar.istio.io/inject": "false" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.102\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.102\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995184522Z", + "kubernetes.io/config.source": "api", + "prometheus.io/port": "15014", + "prometheus.io/scrape": "true", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "istiod-6c86784695", + "uid": "7e799ce2-aa29-4785-9aac-655f6b0e3b9a", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:38Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:install.operator.istio.io/owning-resource": {}, + "f:istio": {}, + "f:istio.io/rev": {}, + "f:operator.istio.io/component": {}, + "f:pod-template-hash": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"7e799ce2-aa29-4785-9aac-655f6b0e3b9a\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"discovery\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CLUSTER_ID\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIOD_ADDR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"JWT_POLICY\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"KUBECONFIG\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"PILOT_CERT_PROVIDER\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"PILOT_ENABLE_ANALYSIS\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_INBOUND\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_OUTBOUND\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"PILOT_TRACE_SAMPLING\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"POD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"REVISION\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"SERVICE_ACCOUNT\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":15010,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":15017,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:requests": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:capabilities": { + ".": {}, + "f:drop": {} + }, + "f:runAsGroup": {}, + "f:runAsNonRoot": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/cacerts\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/istio-dns\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/remote\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/tokens\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": { + ".": {}, + "f:fsGroup": {} + }, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"cacerts\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"istio-kubeconfig\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"istio-token\"}": { + ".": {}, + "f:name": {}, + "f:projected": { + ".": {}, + "f:defaultMode": {}, + "f:sources": {} + } + }, + "k:{\"name\":\"local-certs\"}": { + ".": {}, + "f:emptyDir": { + ".": {}, + "f:medium": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:41Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:41Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:28Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.65\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "local-certs", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "cacerts", + "secret": { + "secretName": "cacerts", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "istio-kubeconfig", + "secret": { + "secretName": "istio-kubeconfig", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "kube-api-access-wtzc9", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "discovery", + "image": "docker.io/istio/pilot:1.11.4", + "args": [ + "discovery", + "--monitoringAddr=:15014", + "--log_output_level=default:info", + "--domain", + "cluster.local", + "--keepaliveMaxServerConnectionAge", + "30m" + ], + "ports": [ + { + "containerPort": 8080, + "protocol": "TCP" + }, + { + "containerPort": 15010, + "protocol": "TCP" + }, + { + "containerPort": 15017, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "REVISION", + "value": "default" + }, + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "KUBECONFIG", + "value": "/var/run/secrets/remote/config" + }, + { + "name": "PILOT_TRACE_SAMPLING", + "value": "100" + }, + { + "name": "PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_OUTBOUND", + "value": "true" + }, + { + "name": "PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_INBOUND", + "value": "true" + }, + { + "name": "ISTIOD_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "PILOT_ENABLE_ANALYSIS", + "value": "false" + }, + { + "name": "CLUSTER_ID", + "value": "Kubernetes" + } + ], + "resources": { + "requests": { + "cpu": "10m", + "memory": "100Mi" + } + }, + "volumeMounts": [ + { + "name": "istio-token", + "readOnly": true, + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "local-certs", + "mountPath": "/var/run/secrets/istio-dns" + }, + { + "name": "cacerts", + "readOnly": true, + "mountPath": "/etc/cacerts" + }, + { + "name": "istio-kubeconfig", + "readOnly": true, + "mountPath": "/var/run/secrets/remote" + }, + { + "name": "kube-api-access-wtzc9", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/ready", + "port": 8080, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 5, + "periodSeconds": 3, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "istiod", + "serviceAccount": "istiod", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:38Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:23Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:23Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:38Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.102", + "podIPs": [ + { + "ip": "172.16.192.102" + } + ], + "startTime": "2021-11-25T19:24:38Z", + "containerStatuses": [ + { + "name": "discovery", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:18Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:24Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://5c5c2da5bbc6a011dcff5d294ee490a3a334adb1a36833af24a78038e0a9ffcc" + } + }, + "ready": true, + "restartCount": 2, + "image": "docker.io/istio/pilot:1.11.4", + "imageID": "docker.io/istio/pilot@sha256:c590783fc54aec5d3edb44e3f588be5431db9f0844d44c4314a896728cdbbf77", + "containerID": "containerd://147358a9b0ebe8031d1ed2c531c20e6453ae0a08765b1c3af5abc88f9445eaf4", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "reviews-v1-545db77b95-hxqkg", + "generateName": "reviews-v1-545db77b95-", + "namespace": "default", + "selfLink": "/api/v1/namespaces/default/pods/reviews-v1-545db77b95-hxqkg", + "uid": "f956e7a7-f40a-4cf8-bb2e-eded3d51f736", + "resourceVersion": "4221932", + "creationTimestamp": "2021-11-25T19:24:50Z", + "labels": { + "app": "reviews", + "pod-template-hash": "545db77b95", + "security.istio.io/tlsMode": "istio", + "service.istio.io/canonical-name": "reviews", + "service.istio.io/canonical-revision": "v1", + "version": "v1" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.86\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks": "istio-cni", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.86\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "kubectl.kubernetes.io/default-container": "reviews", + "kubectl.kubernetes.io/default-logs-container": "reviews", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995189253Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/interceptionMode": "REDIRECT", + "sidecar.istio.io/status": "{\"initContainers\":[\"istio-validation\"],\"containers\":[\"istio-proxy\"],\"volumes\":[\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istio-token\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"default\"}", + "traffic.sidecar.istio.io/excludeInboundPorts": "15020", + "traffic.sidecar.istio.io/includeInboundPorts": "*", + "traffic.sidecar.istio.io/includeOutboundIPRanges": "*" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "reviews-v1-545db77b95", + "uid": "3f02c9b7-9163-4953-a1b6-58e8870e3ffb", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:50Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"3f02c9b7-9163-4953-a1b6-58e8870e3ffb\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"reviews\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"LOG_DIR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/opt/ibm/wlp/output\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"wlp-output\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:54Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:55Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:35Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.86\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istio-envoy", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "wlp-output", + "emptyDir": {} + }, + { + "name": "tmp", + "emptyDir": {} + }, + { + "name": "kube-api-access-s4nn7", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "istio-validation", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "istio-iptables", + "-p", + "15001", + "-z", + "15006", + "-u", + "1337", + "-m", + "REDIRECT", + "-i", + "*", + "-x", + "", + "-b", + "*", + "-d", + "15090,15021,15020", + "--run-validation", + "--skip-rule-apply" + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-s4nn7", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "reviews", + "image": "docker.io/istio/examples-bookinfo-reviews-v1:1.16.2", + "ports": [ + { + "containerPort": 9080, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "LOG_DIR", + "value": "/tmp/logs" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "tmp", + "mountPath": "/tmp" + }, + { + "name": "wlp-output", + "mountPath": "/opt/ibm/wlp/output" + }, + { + "name": "kube-api-access-s4nn7", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 1000 + } + }, + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "sidecar", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info", + "--concurrency", + "2" + ], + "ports": [ + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "PROXY_CONFIG", + "value": "{}\n" + }, + { + "name": "ISTIO_META_POD_PORTS", + "value": "[\n {\"containerPort\":9080,\"protocol\":\"TCP\"}\n]" + }, + { + "name": "ISTIO_META_APP_CONTAINERS", + "value": "reviews" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + }, + { + "name": "ISTIO_META_INTERCEPTION_MODE", + "value": "REDIRECT" + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "reviews-v1" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/default/deployments/reviews-v1" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "istio-token", + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "kube-api-access-s4nn7", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 3, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "bookinfo-reviews", + "serviceAccount": "bookinfo-reviews", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:57Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [reviews istio-proxy]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [reviews istio-proxy]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:50Z" + } + ], + "hostIP": "192.168.204.2", + "startTime": "2021-11-25T19:24:50Z", + "initContainerStatuses": [ + { + "name": "istio-validation", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2021-12-01T13:24:29Z", + "finishedAt": "2021-12-01T13:24:29Z", + "containerID": "containerd://ec77f4199d8874abaedda6db2c128c966b61e471a4ba648ae96b160ff72c9f79" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 1, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://ec77f4199d8874abaedda6db2c128c966b61e471a4ba648ae96b160ff72c9f79" + } + ], + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:30Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://6f39d34408323d49cb0185586b9439e5ce6c77a3dbb7c92f321f3ccbedb82ea2" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 1, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://6f39d34408323d49cb0185586b9439e5ce6c77a3dbb7c92f321f3ccbedb82ea2", + "started": false + }, + { + "name": "reviews", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:30Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://f307d9115424405b9032e44b45f554c81130ed8bf0f4d6d3c13d6c00429b8a89" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 1, + "image": "docker.io/istio/examples-bookinfo-reviews-v1:1.16.2", + "imageID": "docker.io/istio/examples-bookinfo-reviews-v1@sha256:d1b8447be70549f1f7303f266d88c16112e2695cc110603fdb1c8ee432a627bf", + "containerID": "containerd://f307d9115424405b9032e44b45f554c81130ed8bf0f4d6d3c13d6c00429b8a89", + "started": false + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "istio-cni-node-vskbd", + "generateName": "istio-cni-node-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/istio-cni-node-vskbd", + "uid": "f0f021c3-7a38-48d6-a3cc-35577f17ea93", + "resourceVersion": "4221877", + "creationTimestamp": "2021-11-22T19:01:21Z", + "labels": { + "controller-revision-hash": "54bbbb896", + "k8s-app": "istio-cni-node", + "pod-template-generation": "1", + "sidecar.istio.io/inject": "false" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.109\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.109\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995215743Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/metrics", + "prometheus.io/port": "15014", + "prometheus.io/scrape": "true", + "scheduler.alpha.kubernetes.io/critical-pod": "", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "DaemonSet", + "name": "istio-cni-node", + "uid": "0b094814-9e25-4d2b-9d55-5d3a65ffff7b", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-22T19:01:21Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:prometheus.io/path": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {}, + "f:scheduler.alpha.kubernetes.io/critical-pod": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:controller-revision-hash": {}, + "f:k8s-app": {}, + "f:pod-template-generation": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"0b094814-9e25-4d2b-9d55-5d3a65ffff7b\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"install-cni\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CHAINED_CNI_PLUGIN\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CNI_CONF_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"CNI_NETWORK_CONFIG\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:configMapKeyRef": { + ".": {}, + "f:key": {}, + "f:name": {} + } + } + }, + "k:{\"name\":\"CNI_NET_DIR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_BROKEN_POD_LABEL_KEY\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_BROKEN_POD_LABEL_VALUE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_DELETE_PODS\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_ENABLED\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_INIT_CONTAINER_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_LABEL_PODS\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"REPAIR_RUN_AS_DAEMON\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"REPAIR_SIDECAR_ANNOTATION\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/host/etc/cni/net.d\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/host/opt/cni/bin\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/istio-cni\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/os": {} + }, + "f:priorityClassName": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"cni-bin-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"cni-log-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"cni-net-dir\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-22T19:01:24Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-22T19:01:24Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:30Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.66\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "cni-bin-dir", + "hostPath": { + "path": "/usr/libexec/cni", + "type": "" + } + }, + { + "name": "cni-net-dir", + "hostPath": { + "path": "/etc/cni/net.d", + "type": "" + } + }, + { + "name": "cni-log-dir", + "hostPath": { + "path": "/var/run/istio-cni", + "type": "" + } + }, + { + "name": "kube-api-access-5scg9", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "install-cni", + "image": "docker.io/istio/install-cni:1.11.4", + "command": [ + "install-cni" + ], + "env": [ + { + "name": "CNI_CONF_NAME", + "value": "istio-cni.conf" + }, + { + "name": "CNI_NETWORK_CONFIG", + "valueFrom": { + "configMapKeyRef": { + "name": "istio-cni-config", + "key": "cni_network_config" + } + } + }, + { + "name": "CNI_NET_DIR", + "value": "/etc/cni/net.d" + }, + { + "name": "CHAINED_CNI_PLUGIN", + "value": "false" + }, + { + "name": "REPAIR_ENABLED", + "value": "true" + }, + { + "name": "REPAIR_NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + }, + { + "name": "REPAIR_LABEL_PODS", + "value": "true" + }, + { + "name": "REPAIR_DELETE_PODS", + "value": "true" + }, + { + "name": "REPAIR_RUN_AS_DAEMON", + "value": "true" + }, + { + "name": "REPAIR_SIDECAR_ANNOTATION", + "value": "sidecar.istio.io/status" + }, + { + "name": "REPAIR_INIT_CONTAINER_NAME", + "value": "istio-validation" + }, + { + "name": "REPAIR_BROKEN_POD_LABEL_KEY", + "value": "cni.istio.io/uninitialized" + }, + { + "name": "REPAIR_BROKEN_POD_LABEL_VALUE", + "value": "true" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "cni-bin-dir", + "mountPath": "/host/opt/cni/bin" + }, + { + "name": "cni-net-dir", + "mountPath": "/host/etc/cni/net.d" + }, + { + "name": "cni-log-dir", + "mountPath": "/var/run/istio-cni" + }, + { + "name": "kube-api-access-5scg9", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/healthz", + "port": 8000, + "scheme": "HTTP" + }, + "initialDelaySeconds": 5, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "readinessProbe": { + "httpGet": { + "path": "/readyz", + "port": 8000, + "scheme": "HTTP" + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 5, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "kubernetes.io/os": "linux" + }, + "serviceAccountName": "istio-cni", + "serviceAccount": "istio-cni", + "nodeName": "controller-0", + "securityContext": {}, + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchFields": [ + { + "key": "metadata.name", + "operator": "In", + "values": [ + "controller-0" + ] + } + ] + } + ] + } + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "CriticalAddonsOnly", + "operator": "Exists" + }, + { + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/disk-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/memory-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/pid-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/unschedulable", + "operator": "Exists", + "effect": "NoSchedule" + } + ], + "priorityClassName": "system-node-critical", + "priority": 2000001000, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-22T19:01:21Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:32Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:32Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-22T19:01:21Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.109", + "podIPs": [ + { + "ip": "172.16.192.109" + } + ], + "startTime": "2021-11-22T19:01:21Z", + "containerStatuses": [ + { + "name": "install-cni", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:21Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:21Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://f27e9a844e3b693f1aa7635c94554aafdf82f2dbfba54ed1c9d43066d5aa9a78" + } + }, + "ready": true, + "restartCount": 2, + "image": "docker.io/istio/install-cni:1.11.4", + "imageID": "docker.io/istio/install-cni@sha256:6b8b3dbe98515a77b95b2419032a4a0d76cc0a585a624ce0dc56b30215787c7f", + "containerID": "containerd://42f8e8999976b81b29f227b200ededfa64c7a7d149bf33e9192f99f2c9b20e07", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "istio-egressgateway-756d4db566-69jv2", + "generateName": "istio-egressgateway-756d4db566-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/istio-egressgateway-756d4db566-69jv2", + "uid": "60e918e1-c180-4735-8b57-b961d9e2b057", + "resourceVersion": "4222339", + "creationTimestamp": "2021-11-25T19:24:38Z", + "labels": { + "app": "istio-egressgateway", + "chart": "gateways", + "heritage": "Tiller", + "install.operator.istio.io/owning-resource": "unknown", + "istio": "egressgateway", + "istio.io/rev": "default", + "operator.istio.io/component": "EgressGateways", + "pod-template-hash": "756d4db566", + "release": "istio", + "service.istio.io/canonical-name": "istio-egressgateway", + "service.istio.io/canonical-revision": "latest", + "sidecar.istio.io/inject": "false" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.81\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.81\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995221786Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "istio-egressgateway-756d4db566", + "uid": "cc3cb72d-29f7-4eff-bf88-c890ca23b038", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:38Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:prometheus.io/path": {}, + "f:prometheus.io/port": {}, + "f:prometheus.io/scrape": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:chart": {}, + "f:heritage": {}, + "f:install.operator.istio.io/owning-resource": {}, + "f:istio": {}, + "f:istio.io/rev": {}, + "f:operator.istio.io/component": {}, + "f:pod-template-hash": {}, + "f:release": {}, + "f:service.istio.io/canonical-name": {}, + "f:service.istio.io/canonical-revision": {}, + "f:sidecar.istio.io/inject": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"cc3cb72d-29f7-4eff-bf88-c890ca23b038\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:preferredDuringSchedulingIgnoredDuringExecution": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"istio-proxy\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"CA_ADDR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"HOST_IP\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"INSTANCE_IP\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"ISTIO_META_CLUSTER_ID\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_MESH_ID\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_OWNER\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_ROUTER_MODE\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_UNPRIVILEGED_POD\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"ISTIO_META_WORKLOAD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"JWT_POLICY\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"PILOT_CERT_PROVIDER\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"POD_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"SERVICE_ACCOUNT\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"TRUST_DOMAIN\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":8443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + }, + "k:{\"containerPort\":15090,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": { + ".": {}, + "f:limits": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + }, + "f:requests": { + ".": {}, + "f:cpu": {}, + "f:memory": {} + } + }, + "f:securityContext": { + ".": {}, + "f:allowPrivilegeEscalation": {}, + "f:capabilities": { + ".": {}, + "f:drop": {} + }, + "f:privileged": {}, + "f:readOnlyRootFilesystem": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/istio/config\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/etc/istio/egressgateway-ca-certs\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/etc/istio/egressgateway-certs\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/etc/istio/pod\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/etc/istio/proxy\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/lib/istio/data\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/istio\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/run/secrets/tokens\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": { + ".": {}, + "f:fsGroup": {}, + "f:runAsGroup": {}, + "f:runAsNonRoot": {}, + "f:runAsUser": {} + }, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"config-volume\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {}, + "f:optional": {} + }, + "f:name": {} + }, + "k:{\"name\":\"egressgateway-ca-certs\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"egressgateway-certs\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:optional": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"istio-data\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"istio-envoy\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"istio-token\"}": { + ".": {}, + "f:name": {}, + "f:projected": { + ".": {}, + "f:defaultMode": {}, + "f:sources": {} + } + }, + "k:{\"name\":\"istiod-ca-cert\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"podinfo\"}": { + ".": {}, + "f:downwardAPI": { + ".": {}, + "f:defaultMode": {}, + "f:items": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:53Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.71\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-envoy", + "emptyDir": {} + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "config-volume", + "configMap": { + "name": "istio", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "egressgateway-certs", + "secret": { + "secretName": "istio-egressgateway-certs", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "egressgateway-ca-certs", + "secret": { + "secretName": "istio-egressgateway-ca-certs", + "defaultMode": 420, + "optional": true + } + }, + { + "name": "kube-api-access-j6szc", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "router", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info" + ], + "ports": [ + { + "containerPort": 8080, + "protocol": "TCP" + }, + { + "containerPort": 8443, + "protocol": "TCP" + }, + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "istio-egressgateway" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/istio-system/deployments/istio-egressgateway" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + }, + { + "name": "ISTIO_META_UNPRIVILEGED_POD", + "value": "true" + }, + { + "name": "ISTIO_META_ROUTER_MODE", + "value": "standard" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "config-volume", + "mountPath": "/etc/istio/config" + }, + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-token", + "readOnly": true, + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "egressgateway-certs", + "readOnly": true, + "mountPath": "/etc/istio/egressgateway-certs" + }, + { + "name": "egressgateway-ca-certs", + "readOnly": true, + "mountPath": "/etc/istio/egressgateway-ca-certs" + }, + { + "name": "kube-api-access-j6szc", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 1, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "istio-egressgateway-service-account", + "serviceAccount": "istio-egressgateway-service-account", + "nodeName": "controller-0", + "securityContext": { + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "fsGroup": 1337 + }, + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "amd64", + "ppc64le", + "s390x" + ] + } + ] + } + ] + }, + "preferredDuringSchedulingIgnoredDuringExecution": [ + { + "weight": 2, + "preference": { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "amd64" + ] + } + ] + } + }, + { + "weight": 2, + "preference": { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "ppc64le" + ] + } + ] + } + }, + { + "weight": 2, + "preference": { + "matchExpressions": [ + { + "key": "kubernetes.io/arch", + "operator": "In", + "values": [ + "s390x" + ] + } + ] + } + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:38Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:58Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:58Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:38Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.81", + "podIPs": [ + { + "ip": "172.16.192.81" + } + ], + "startTime": "2021-11-25T19:24:38Z", + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:28Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:21Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://2bce6ccc21a964789ae3d53518eebd5793241b70ddbb48b4fe8ce62df4520577" + } + }, + "ready": true, + "restartCount": 2, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://88fe1d17819b3b378de1d577459aa4dc5c466de2393e36594790833b9307b0ab", + "started": true + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "grafana-68cc7d6d78-xsk57", + "generateName": "grafana-68cc7d6d78-", + "namespace": "istio-system", + "selfLink": "/api/v1/namespaces/istio-system/pods/grafana-68cc7d6d78-xsk57", + "uid": "d577333e-e14f-40cf-857e-359c701c2167", + "resourceVersion": "4222467", + "creationTimestamp": "2021-12-01T13:24:42Z", + "labels": { + "app": "grafana", + "app.kubernetes.io/instance": "grafana", + "app.kubernetes.io/name": "grafana", + "pod-template-hash": "68cc7d6d78" + }, + "annotations": { + "checksum/config": "af4530cc6e67e63b6285f3ceccaf0aaa2a20d322e35c9f0ae48721add3b58eb0", + "checksum/dashboards-json-config": "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b", + "checksum/sc-dashboard-provider-config": "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b", + "cni.projectcalico.org/podIP": "172.16.192.105/32", + "cni.projectcalico.org/podIPs": "172.16.192.105/32", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.105\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.105\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995202186Z", + "kubernetes.io/config.source": "api", + "sidecar.istio.io/inject": "false" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "grafana-68cc7d6d78", + "uid": "4f1989fe-25ac-467b-a1c3-479d8deeee94", + "controller": true, + "blockOwnerDeletion": true + } + ] + }, + "spec": { + "volumes": [ + { + "name": "config", + "configMap": { + "name": "grafana", + "defaultMode": 420 + } + }, + { + "name": "dashboards-istio", + "configMap": { + "name": "istio-grafana-dashboards", + "defaultMode": 420 + } + }, + { + "name": "dashboards-istio-services", + "configMap": { + "name": "istio-services-grafana-dashboards", + "defaultMode": 420 + } + }, + { + "name": "storage", + "emptyDir": {} + }, + { + "name": "kube-api-access-9tqv7", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "grafana", + "image": "grafana/grafana:7.5.5", + "ports": [ + { + "name": "service", + "containerPort": 3000, + "protocol": "TCP" + }, + { + "name": "grafana", + "containerPort": 3000, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "GF_PATHS_DATA", + "value": "/var/lib/grafana/" + }, + { + "name": "GF_PATHS_LOGS", + "value": "/var/log/grafana" + }, + { + "name": "GF_PATHS_PLUGINS", + "value": "/var/lib/grafana/plugins" + }, + { + "name": "GF_PATHS_PROVISIONING", + "value": "/etc/grafana/provisioning" + }, + { + "name": "GF_AUTH_ANONYMOUS_ENABLED", + "value": "true" + }, + { + "name": "GF_AUTH_ANONYMOUS_ORG_ROLE", + "value": "Admin" + }, + { + "name": "GF_AUTH_BASIC_ENABLED", + "value": "false" + }, + { + "name": "GF_SECURITY_ADMIN_PASSWORD", + "value": "-" + }, + { + "name": "GF_SECURITY_ADMIN_USER", + "value": "-" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "config", + "mountPath": "/etc/grafana/grafana.ini", + "subPath": "grafana.ini" + }, + { + "name": "storage", + "mountPath": "/var/lib/grafana" + }, + { + "name": "dashboards-istio", + "mountPath": "/var/lib/grafana/dashboards/istio" + }, + { + "name": "dashboards-istio-services", + "mountPath": "/var/lib/grafana/dashboards/istio-services" + }, + { + "name": "config", + "mountPath": "/etc/grafana/provisioning/datasources/datasources.yaml", + "subPath": "datasources.yaml" + }, + { + "name": "config", + "mountPath": "/etc/grafana/provisioning/dashboards/dashboardproviders.yaml", + "subPath": "dashboardproviders.yaml" + }, + { + "name": "kube-api-access-9tqv7", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/api/health", + "port": 3000, + "scheme": "HTTP" + }, + "initialDelaySeconds": 60, + "timeoutSeconds": 30, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 10 + }, + "readinessProbe": { + "httpGet": { + "path": "/api/health", + "port": 3000, + "scheme": "HTTP" + }, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "grafana", + "serviceAccount": "grafana", + "nodeName": "controller-0", + "securityContext": { + "runAsUser": 472, + "runAsGroup": 472, + "fsGroup": 472 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:14Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:14Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.105", + "podIPs": [ + { + "ip": "172.16.192.105" + } + ], + "startTime": "2021-12-01T13:24:46Z", + "containerStatuses": [ + { + "name": "grafana", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:13Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:59Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://29eae73a55f1698e679f23f697800b4bad150501b7da37c6f9d35311da6177a6" + } + }, + "ready": true, + "restartCount": 1, + "image": "docker.io/grafana/grafana:7.5.5", + "imageID": "docker.io/grafana/grafana@sha256:075819791b43f30aab18497fff217d3aec918d7d55bf873818de6a916da04d54", + "containerID": "containerd://cbff9ce8019600e8ec7962536c5c6434daa7beedc96ce55794da9a14e9a13f5e", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "cm-cert-manager-webhook-7d4bcf867-nnhhf", + "generateName": "cm-cert-manager-webhook-7d4bcf867-", + "namespace": "cert-manager", + "selfLink": "/api/v1/namespaces/cert-manager/pods/cm-cert-manager-webhook-7d4bcf867-nnhhf", + "uid": "31d16d5a-9196-41fa-b217-cb52acec3dc6", + "resourceVersion": "4222724", + "creationTimestamp": "2021-11-17T17:08:38Z", + "labels": { + "app": "webhook", + "app.kubernetes.io/component": "webhook", + "app.kubernetes.io/instance": "cm-cert-manager", + "app.kubernetes.io/managed-by": "Tiller", + "app.kubernetes.io/name": "webhook", + "helm.sh/chart": "cert-manager-v0.1.0", + "pod-template-hash": "7d4bcf867" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.84\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.84\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995198317Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "cm-cert-manager-webhook-7d4bcf867", + "uid": "9d079e3b-0ab2-4a91-80b3-d36457c44c3b", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:38Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:app.kubernetes.io/component": {}, + "f:app.kubernetes.io/instance": {}, + "f:app.kubernetes.io/managed-by": {}, + "f:app.kubernetes.io/name": {}, + "f:helm.sh/chart": {}, + "f:pod-template-hash": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"9d079e3b-0ab2-4a91-80b3-d36457c44c3b\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:podAntiAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": {} + } + }, + "f:containers": { + "k:{\"name\":\"cert-manager\"}": { + ".": {}, + "f:args": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:livenessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":10250,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:readinessProbe": { + ".": {}, + "f:failureThreshold": {}, + "f:httpGet": { + ".": {}, + "f:path": {}, + "f:port": {}, + "f:scheme": {} + }, + "f:initialDelaySeconds": {}, + "f:periodSeconds": {}, + "f:successThreshold": {}, + "f:timeoutSeconds": {} + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:39Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:08:39Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:35Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.74\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-api-access-cxm99", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "cert-manager", + "image": "registry.local:9001/quay.io/jetstack/cert-manager-webhook:v0.15.0", + "args": [ + "--v=2", + "--secure-port=10250", + "--dynamic-serving-ca-secret-namespace=cert-manager", + "--dynamic-serving-ca-secret-name=cm-cert-manager-webhook-ca", + "--dynamic-serving-dns-names=cm-cert-manager-webhook,cm-cert-manager-webhook.cert-manager,cm-cert-manager-webhook.cert-manager.svc" + ], + "ports": [ + { + "name": "https", + "containerPort": 10250, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-cxm99", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/livez", + "port": 6080, + "scheme": "HTTP" + }, + "initialDelaySeconds": 60, + "timeoutSeconds": 1, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 3 + }, + "readinessProbe": { + "httpGet": { + "path": "/healthz", + "port": 6080, + "scheme": "HTTP" + }, + "initialDelaySeconds": 5, + "timeoutSeconds": 1, + "periodSeconds": 5, + "successThreshold": 1, + "failureThreshold": 3 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "cm-cert-manager-webhook", + "serviceAccount": "cm-cert-manager-webhook", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "affinity": { + "podAntiAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": [ + { + "labelSelector": { + "matchExpressions": [ + { + "key": "app", + "operator": "In", + "values": [ + "webhook" + ] + } + ] + }, + "topologyKey": "kubernetes.io/hostname" + } + ] + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:08:38Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:37Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:37Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:08:38Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.84", + "podIPs": [ + { + "ip": "172.16.192.84" + } + ], + "startTime": "2021-11-17T17:08:38Z", + "containerStatuses": [ + { + "name": "cert-manager", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:32Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:27Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://ae8db91f5263cc74844b7fe8d7759127520c3737017fc8193fbcf3ebc1ec3fa0" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/quay.io/jetstack/cert-manager-webhook:v0.15.0", + "imageID": "registry.local:9001/quay.io/jetstack/cert-manager-webhook@sha256:b8f13be1260cbd473f34939155f4ef854ce089a3719371965ede03f54e3870d4", + "containerID": "containerd://f66dd04bb5ac42eea1e3b8d4dfbd6249cadfbd1e03d8538167b755618653ceeb", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "platform-deployment-manager-0", + "generateName": "platform-deployment-manager-", + "namespace": "platform-deployment-manager", + "selfLink": "/api/v1/namespaces/platform-deployment-manager/pods/platform-deployment-manager-0", + "uid": "c26c7353-2dd0-4e1d-9896-80a3a0d3d821", + "resourceVersion": "4221994", + "creationTimestamp": "2021-11-17T17:09:09Z", + "labels": { + "control-plane": "controller-manager", + "controller-revision-hash": "platform-deployment-manager-756bd69f9", + "controller-tools.k8s.io": "1.0", + "statefulset.kubernetes.io/pod-name": "platform-deployment-manager-0" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.113\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.113\"\n ],\n \"default\": true,\n \"dns\": {}\n}]", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995229812Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "StatefulSet", + "name": "platform-deployment-manager", + "uid": "2db97db8-8cb1-41dc-b111-0c42a29081a3", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:09:09Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:control-plane": {}, + "f:controller-revision-hash": {}, + "f:controller-tools.k8s.io": {}, + "f:statefulset.kubernetes.io/pod-name": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"2db97db8-8cb1-41dc-b111-0c42a29081a3\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"kube-rbac-proxy\"}": { + ".": {}, + "f:args": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":8443,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + }, + "k:{\"name\":\"manager\"}": { + ".": {}, + "f:args": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"POD_NAMESPACE\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + }, + "k:{\"name\":\"SECRET_NAME\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + }, + "k:{\"name\":\"WAIT\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9876,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:name": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/etc/manager\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/tmp/cert\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:hostname": {}, + "f:imagePullSecrets": { + ".": {}, + "k:{\"name\":\"default-registry-key\"}": { + ".": {}, + "f:name": {} + } + }, + "f:nodeSelector": { + ".": {}, + "f:node-role.kubernetes.io/master": {} + }, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:subdomain": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"cert\"}": { + ".": {}, + "f:name": {}, + "f:secret": { + ".": {}, + "f:defaultMode": {}, + "f:secretName": {} + } + }, + "k:{\"name\":\"config\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:09:10Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + ".": {}, + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:09:10Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:40Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.94\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "cert", + "secret": { + "secretName": "platform-deployment-manager-webhook-server-secret", + "defaultMode": 420 + } + }, + { + "name": "config", + "configMap": { + "name": "platform-deployment-manager-config", + "defaultMode": 420 + } + }, + { + "name": "kube-api-access-t5fwb", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "kube-rbac-proxy", + "image": "admin-2.cumulus.wrs.com:30093/wrcp-staging/gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0", + "args": [ + "--secure-listen-address=0.0.0.0:8443", + "--upstream=http://127.0.0.1:8080/", + "--logtostderr=true", + "--v=10" + ], + "ports": [ + { + "name": "https", + "containerPort": 8443, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-t5fwb", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + }, + { + "name": "manager", + "image": "admin-2.cumulus.wrs.com:30093/wind-river/cloud-platform-deployment-manager:latest", + "command": [ + "/manager" + ], + "args": [ + "--metrics-addr=127.0.0.1:8080", + "--alsologtostderr=true", + "--v=0" + ], + "ports": [ + { + "name": "webhook-server", + "containerPort": 9876, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "WAIT", + "value": "false" + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "SECRET_NAME", + "value": "platform-deployment-manager-webhook-server-secret" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "cert", + "readOnly": true, + "mountPath": "/tmp/cert" + }, + { + "name": "config", + "mountPath": "/etc/manager" + }, + { + "name": "kube-api-access-t5fwb", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "Always" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 10, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "node-role.kubernetes.io/master": "" + }, + "serviceAccountName": "default", + "serviceAccount": "default", + "nodeName": "controller-0", + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "default-registry-key" + } + ], + "hostname": "platform-deployment-manager-0", + "subdomain": "platform-deployment-manager-service", + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node-role.kubernetes.io/master", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:09:09Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:56Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:56Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:09:09Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "172.16.192.113", + "podIPs": [ + { + "ip": "172.16.192.113" + } + ], + "startTime": "2021-11-17T17:09:09Z", + "containerStatuses": [ + { + "name": "kube-rbac-proxy", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:54Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:38Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://121f4fdcbee9c884ddac408c7a1881440576a45735e846305c2a1244f5188ecc" + } + }, + "ready": true, + "restartCount": 4, + "image": "admin-2.cumulus.wrs.com:30093/wrcp-staging/gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0", + "imageID": "admin-2.cumulus.wrs.com:30093/wrcp-staging/gcr.io/kubebuilder/kube-rbac-proxy@sha256:297896d96b827bbcb1abd696da1b2d81cab88359ac34cce0e8281f266b4e08de", + "containerID": "containerd://f624ebd63ba1d090ef1681052f5eba0ccde34070e2d19e080d51ac1b5f13349d", + "started": true + }, + { + "name": "manager", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:56Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:39Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://327906bd033efb67f8fb7db6e99317853926b4bb41147895d76b453addfd9c73" + } + }, + "ready": true, + "restartCount": 5, + "image": "admin-2.cumulus.wrs.com:30093/wind-river/cloud-platform-deployment-manager:latest", + "imageID": "admin-2.cumulus.wrs.com:30093/wind-river/cloud-platform-deployment-manager@sha256:f00ea4365bf647fd1ffd0442f958a9619417c4eb496cc71bf66282536781a357", + "containerID": "containerd://a19392877aedb610ae0c8beea3476b82f6ea65c8c1b489cc5c1f36fcc12915b1", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "reviews-v3-84779c7bbc-bltnb", + "generateName": "reviews-v3-84779c7bbc-", + "namespace": "default", + "selfLink": "/api/v1/namespaces/default/pods/reviews-v3-84779c7bbc-bltnb", + "uid": "2fe64f53-8262-4463-9ba0-a211dc92825f", + "resourceVersion": "4221961", + "creationTimestamp": "2021-11-25T19:24:50Z", + "labels": { + "app": "reviews", + "pod-template-hash": "84779c7bbc", + "security.istio.io/tlsMode": "istio", + "service.istio.io/canonical-name": "reviews", + "service.istio.io/canonical-revision": "v3", + "version": "v3" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.92\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks": "istio-cni", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.92\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "kubectl.kubernetes.io/default-container": "reviews", + "kubectl.kubernetes.io/default-logs-container": "reviews", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995204700Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/interceptionMode": "REDIRECT", + "sidecar.istio.io/status": "{\"initContainers\":[\"istio-validation\"],\"containers\":[\"istio-proxy\"],\"volumes\":[\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istio-token\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"default\"}", + "traffic.sidecar.istio.io/excludeInboundPorts": "15020", + "traffic.sidecar.istio.io/includeInboundPorts": "*", + "traffic.sidecar.istio.io/includeOutboundIPRanges": "*" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "reviews-v3-84779c7bbc", + "uid": "f3c0a216-2bf0-443e-acba-aff73e19488f", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:50Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"f3c0a216-2bf0-443e-acba-aff73e19488f\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"reviews\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"LOG_DIR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/opt/ibm/wlp/output\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"wlp-output\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:53Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-25T19:24:54Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:36Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.92\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istio-envoy", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "wlp-output", + "emptyDir": {} + }, + { + "name": "tmp", + "emptyDir": {} + }, + { + "name": "kube-api-access-5m8sg", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "istio-validation", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "istio-iptables", + "-p", + "15001", + "-z", + "15006", + "-u", + "1337", + "-m", + "REDIRECT", + "-i", + "*", + "-x", + "", + "-b", + "*", + "-d", + "15090,15021,15020", + "--run-validation", + "--skip-rule-apply" + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-5m8sg", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "reviews", + "image": "docker.io/istio/examples-bookinfo-reviews-v3:1.16.2", + "ports": [ + { + "containerPort": 9080, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "LOG_DIR", + "value": "/tmp/logs" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "tmp", + "mountPath": "/tmp" + }, + { + "name": "wlp-output", + "mountPath": "/opt/ibm/wlp/output" + }, + { + "name": "kube-api-access-5m8sg", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 1000 + } + }, + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "sidecar", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info", + "--concurrency", + "2" + ], + "ports": [ + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "PROXY_CONFIG", + "value": "{}\n" + }, + { + "name": "ISTIO_META_POD_PORTS", + "value": "[\n {\"containerPort\":9080,\"protocol\":\"TCP\"}\n]" + }, + { + "name": "ISTIO_META_APP_CONTAINERS", + "value": "reviews" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + }, + { + "name": "ISTIO_META_INTERCEPTION_MODE", + "value": "REDIRECT" + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "reviews-v3" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/default/deployments/reviews-v3" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "istio-token", + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "kube-api-access-5m8sg", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 3, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "bookinfo-reviews", + "serviceAccount": "bookinfo-reviews", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:32Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:01Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [reviews istio-proxy]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:01Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [reviews istio-proxy]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-25T19:24:50Z" + } + ], + "hostIP": "192.168.204.2", + "startTime": "2021-11-25T19:24:50Z", + "initContainerStatuses": [ + { + "name": "istio-validation", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2021-12-01T13:24:31Z", + "finishedAt": "2021-12-01T13:24:31Z", + "containerID": "containerd://9b25f00c1099e84a45a7edea59effc87cf2fb857b7f4317d9fc329cd19b4d0c2" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 1, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://9b25f00c1099e84a45a7edea59effc87cf2fb857b7f4317d9fc329cd19b4d0c2" + } + ], + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:33Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://c89a5be51a1bbbda9d853c54fdba4f49c1377529a38da42230ce03713d0760f2" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 1, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://c89a5be51a1bbbda9d853c54fdba4f49c1377529a38da42230ce03713d0760f2", + "started": false + }, + { + "name": "reviews", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:33Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://fb16c9dd814e160ddc4578afec69d90b029fa4b3d2235fedd87aeb334b0d31d3" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 1, + "image": "docker.io/istio/examples-bookinfo-reviews-v3:1.16.2", + "imageID": "docker.io/istio/examples-bookinfo-reviews-v3@sha256:f812dcc7ab76dba313ce0a9ae3010d4ae705da3ce4e636ec3d0c50c709d296a4", + "containerID": "containerd://fb16c9dd814e160ddc4578afec69d90b029fa4b3d2235fedd87aeb334b0d31d3", + "started": false + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "productpage-v1-6b746f74dc-2pr2p", + "generateName": "productpage-v1-6b746f74dc-", + "namespace": "default", + "selfLink": "/api/v1/namespaces/default/pods/productpage-v1-6b746f74dc-2pr2p", + "uid": "10e91940-81a4-433c-aa3e-cc60c1e6dc5f", + "resourceVersion": "4834101", + "creationTimestamp": "2021-12-01T13:24:42Z", + "labels": { + "app": "productpage", + "pod-template-hash": "6b746f74dc", + "security.istio.io/tlsMode": "istio", + "service.istio.io/canonical-name": "productpage", + "service.istio.io/canonical-revision": "v1", + "version": "v1" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.100\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks": "istio-cni", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.100\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "kubectl.kubernetes.io/default-container": "productpage", + "kubectl.kubernetes.io/default-logs-container": "productpage", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995197176Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/interceptionMode": "REDIRECT", + "sidecar.istio.io/status": "{\"initContainers\":[\"istio-validation\"],\"containers\":[\"istio-proxy\"],\"volumes\":[\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istio-token\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"default\"}", + "traffic.sidecar.istio.io/excludeInboundPorts": "15020", + "traffic.sidecar.istio.io/includeInboundPorts": "*", + "traffic.sidecar.istio.io/includeOutboundIPRanges": "*" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "productpage-v1-6b746f74dc", + "uid": "bffa6ff3-1e17-43ad-a4a8-e980de1dd05f", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"bffa6ff3-1e17-43ad-a4a8-e980de1dd05f\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"productpage\"}": { + ".": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:50Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:51Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-02T18:54:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.100\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istio-envoy", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "tmp", + "emptyDir": {} + }, + { + "name": "kube-api-access-lvvhh", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "istio-validation", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "istio-iptables", + "-p", + "15001", + "-z", + "15006", + "-u", + "1337", + "-m", + "REDIRECT", + "-i", + "*", + "-x", + "", + "-b", + "*", + "-d", + "15090,15021,15020", + "--run-validation", + "--skip-rule-apply" + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-lvvhh", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "productpage", + "image": "docker.io/istio/examples-bookinfo-productpage-v1:1.16.2", + "ports": [ + { + "containerPort": 9080, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "tmp", + "mountPath": "/tmp" + }, + { + "name": "kube-api-access-lvvhh", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 1000 + } + }, + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "sidecar", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info", + "--concurrency", + "2" + ], + "ports": [ + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "PROXY_CONFIG", + "value": "{}\n" + }, + { + "name": "ISTIO_META_POD_PORTS", + "value": "[\n {\"containerPort\":9080,\"protocol\":\"TCP\"}\n]" + }, + { + "name": "ISTIO_META_APP_CONTAINERS", + "value": "productpage" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + }, + { + "name": "ISTIO_META_INTERCEPTION_MODE", + "value": "REDIRECT" + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "productpage-v1" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/default/deployments/productpage-v1" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "istio-token", + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "kube-api-access-lvvhh", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 3, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "bookinfo-productpage", + "serviceAccount": "bookinfo-productpage", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:54Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [productpage istio-proxy]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [productpage istio-proxy]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "startTime": "2021-12-01T13:24:46Z", + "initContainerStatuses": [ + { + "name": "istio-validation", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2021-12-01T13:24:52Z", + "finishedAt": "2021-12-01T13:24:52Z", + "containerID": "containerd://b990442ade10476abf59f1008d6eebab4cdaac32fdb7e6798ca370b79ed38439" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://b990442ade10476abf59f1008d6eebab4cdaac32fdb7e6798ca370b79ed38439" + } + ], + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:39Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://ceade5950c250ac17a763fe93d0d5208179337daf9b88f5f15dfa48ba695ceba" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://ceade5950c250ac17a763fe93d0d5208179337daf9b88f5f15dfa48ba695ceba", + "started": false + }, + { + "name": "productpage", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-02T18:54:48Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://322bc518a268e1469ad10f571e6458514d6f70b7e933132ca4e2b4670cb38462" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 2, + "image": "docker.io/istio/examples-bookinfo-productpage-v1:1.16.2", + "imageID": "docker.io/istio/examples-bookinfo-productpage-v1@sha256:63ac3b4fb6c3ba395f5d044b0e10bae513afb34b9b7d862b3a7c3de7e0686667", + "containerID": "containerd://322bc518a268e1469ad10f571e6458514d6f70b7e933132ca4e2b4670cb38462", + "started": false + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "kube-apiserver-controller-0", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/kube-apiserver-controller-0", + "uid": "d448f04de14b671e1a6fa5c7008478c1", + "creationTimestamp": null, + "labels": { + "component": "kube-apiserver", + "tier": "control-plane" + }, + "annotations": { + "kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint": "192.168.206.2:6443", + "kubernetes.io/config.hash": "d448f04de14b671e1a6fa5c7008478c1", + "kubernetes.io/config.seen": "2022-01-16T16:48:19.844008519Z", + "kubernetes.io/config.source": "file" + } + }, + "spec": { + "volumes": [ + { + "name": "ca-certs", + "hostPath": { + "path": "/etc/ssl/certs", + "type": "DirectoryOrCreate" + } + }, + { + "name": "encryption-config", + "hostPath": { + "path": "/etc/kubernetes/encryption-provider.yaml", + "type": "File" + } + }, + { + "name": "etc-pki", + "hostPath": { + "path": "/etc/pki", + "type": "DirectoryOrCreate" + } + }, + { + "name": "etcd-certs-0", + "hostPath": { + "path": "/etc/etcd", + "type": "DirectoryOrCreate" + } + }, + { + "name": "k8s-certs", + "hostPath": { + "path": "/etc/kubernetes/pki", + "type": "DirectoryOrCreate" + } + } + ], + "containers": [ + { + "name": "kube-apiserver", + "image": "registry.local:9001/k8s.gcr.io/kube-apiserver:v1.21.3", + "command": [ + "kube-apiserver", + "--advertise-address=192.168.206.2", + "--allow-privileged=true", + "--authorization-mode=Node,RBAC", + "--client-ca-file=/etc/kubernetes/pki/ca.crt", + "--default-not-ready-toleration-seconds=30", + "--default-unreachable-toleration-seconds=30", + "--enable-admission-plugins=NodeRestriction", + "--enable-bootstrap-token-auth=true", + "--encryption-provider-config=/etc/kubernetes/encryption-provider.yaml", + "--etcd-cafile=/etc/etcd/ca.crt", + "--etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt", + "--etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key", + "--etcd-servers=https://192.168.206.1:2379", + "--event-ttl=24h", + "--feature-gates=SCTPSupport=true,TTLAfterFinished=true,HugePageStorageMediumSize=true,RemoveSelfLink=false", + "--insecure-port=0", + "--kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt", + "--kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key", + "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", + "--proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt", + "--proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key", + "--requestheader-allowed-names=front-proxy-client", + "--requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt", + "--requestheader-extra-headers-prefix=X-Remote-Extra-", + "--requestheader-group-headers=X-Remote-Group", + "--requestheader-username-headers=X-Remote-User", + "--secure-port=6443", + "--service-account-issuer=https://kubernetes.default.svc.cluster.local", + "--service-account-key-file=/etc/kubernetes/pki/sa.pub", + "--service-account-signing-key-file=/etc/kubernetes/pki/sa.key", + "--service-cluster-ip-range=10.96.0.0/12", + "--tls-cert-file=/etc/kubernetes/pki/apiserver.crt", + "--tls-private-key-file=/etc/kubernetes/pki/apiserver.key" + ], + "resources": { + "requests": { + "cpu": "0" + } + }, + "volumeMounts": [ + { + "name": "ca-certs", + "readOnly": true, + "mountPath": "/etc/ssl/certs" + }, + { + "name": "encryption-config", + "readOnly": true, + "mountPath": "/etc/kubernetes/encryption-provider.yaml" + }, + { + "name": "etc-pki", + "readOnly": true, + "mountPath": "/etc/pki" + }, + { + "name": "etcd-certs-0", + "readOnly": true, + "mountPath": "/etc/etcd" + }, + { + "name": "k8s-certs", + "readOnly": true, + "mountPath": "/etc/kubernetes/pki" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/livez", + "port": 6443, + "host": "192.168.206.2", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 15, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 8 + }, + "readinessProbe": { + "httpGet": { + "path": "/readyz", + "port": 6443, + "host": "192.168.206.2", + "scheme": "HTTPS" + }, + "timeoutSeconds": 15, + "periodSeconds": 1, + "successThreshold": 1, + "failureThreshold": 3 + }, + "startupProbe": { + "httpGet": { + "path": "/livez", + "port": 6443, + "host": "192.168.206.2", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 15, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 24 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoExecute" + } + ], + "priorityClassName": "system-node-critical", + "enableServiceLinks": true + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:22:32Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:22:32Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2021-12-01T13:22:32Z", + "containerStatuses": [ + { + "name": "kube-apiserver", + "state": { + "running": { + "startedAt": "2022-01-16T16:49:08Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 1, + "reason": "Error", + "startedAt": "2022-01-16T16:48:26Z", + "finishedAt": "2022-01-16T16:48:48Z", + "containerID": "containerd://73f274665188ece09be0a5072a2e7c7d1c4810d911696119e9c83d915e239ca3" + } + }, + "ready": true, + "restartCount": 8, + "image": "registry.local:9001/k8s.gcr.io/kube-apiserver:v1.21.3", + "imageID": "registry.local:9001/k8s.gcr.io/kube-apiserver@sha256:910cfdf034262c7b68ecb17c0885f39bdaaad07d87c9a5b6320819d8500b7ee5", + "containerID": "containerd://b09c4b5a869ff6d9bb692e628f00d82b5c09f587a4664e91e9a448b3a90e8c55", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "kube-controller-manager-controller-0", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/kube-controller-manager-controller-0", + "uid": "6684427ace72f3181dbc0444f56e654e", + "creationTimestamp": null, + "labels": { + "component": "kube-controller-manager", + "tier": "control-plane" + }, + "annotations": { + "kubernetes.io/config.hash": "6684427ace72f3181dbc0444f56e654e", + "kubernetes.io/config.seen": "2022-01-16T16:48:19.844032066Z", + "kubernetes.io/config.source": "file" + } + }, + "spec": { + "volumes": [ + { + "name": "ca-certs", + "hostPath": { + "path": "/etc/ssl/certs", + "type": "DirectoryOrCreate" + } + }, + { + "name": "etc-pki", + "hostPath": { + "path": "/etc/pki", + "type": "DirectoryOrCreate" + } + }, + { + "name": "flexvolume-dir", + "hostPath": { + "path": "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/", + "type": "DirectoryOrCreate" + } + }, + { + "name": "k8s-certs", + "hostPath": { + "path": "/etc/kubernetes/pki", + "type": "DirectoryOrCreate" + } + }, + { + "name": "kubeconfig", + "hostPath": { + "path": "/etc/kubernetes/controller-manager.conf", + "type": "FileOrCreate" + } + } + ], + "containers": [ + { + "name": "kube-controller-manager", + "image": "registry.local:9001/k8s.gcr.io/kube-controller-manager:v1.21.3", + "command": [ + "kube-controller-manager", + "--allocate-node-cidrs=true", + "--authentication-kubeconfig=/etc/kubernetes/controller-manager.conf", + "--authorization-kubeconfig=/etc/kubernetes/controller-manager.conf", + "--bind-address=127.0.0.1", + "--client-ca-file=/etc/kubernetes/pki/ca.crt", + "--cluster-cidr=172.16.0.0/16", + "--cluster-name=kubernetes", + "--cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt", + "--cluster-signing-key-file=/etc/kubernetes/pki/ca.key", + "--controllers=*,bootstrapsigner,tokencleaner", + "--feature-gates=TTLAfterFinished=true", + "--flex-volume-plugin-dir=/usr/libexec/kubernetes/kubelet-plugins/volume/exec/", + "--kubeconfig=/etc/kubernetes/controller-manager.conf", + "--leader-elect=true", + "--node-monitor-grace-period=20s", + "--node-monitor-period=2s", + "--pod-eviction-timeout=30s", + "--port=0", + "--requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt", + "--root-ca-file=/etc/kubernetes/pki/ca.crt", + "--service-account-private-key-file=/etc/kubernetes/pki/sa.key", + "--service-cluster-ip-range=10.96.0.0/12", + "--use-service-account-credentials=true" + ], + "resources": { + "requests": { + "cpu": "0" + } + }, + "volumeMounts": [ + { + "name": "ca-certs", + "readOnly": true, + "mountPath": "/etc/ssl/certs" + }, + { + "name": "etc-pki", + "readOnly": true, + "mountPath": "/etc/pki" + }, + { + "name": "flexvolume-dir", + "mountPath": "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/" + }, + { + "name": "k8s-certs", + "readOnly": true, + "mountPath": "/etc/kubernetes/pki" + }, + { + "name": "kubeconfig", + "readOnly": true, + "mountPath": "/etc/kubernetes/controller-manager.conf" + } + ], + "livenessProbe": { + "httpGet": { + "path": "/healthz", + "port": 10257, + "host": "127.0.0.1", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 15, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 8 + }, + "startupProbe": { + "httpGet": { + "path": "/healthz", + "port": 10257, + "host": "127.0.0.1", + "scheme": "HTTPS" + }, + "initialDelaySeconds": 10, + "timeoutSeconds": 15, + "periodSeconds": 10, + "successThreshold": 1, + "failureThreshold": 24 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent" + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "operator": "Exists", + "effect": "NoExecute" + } + ], + "priorityClassName": "system-node-critical", + "enableServiceLinks": true + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:25Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:43Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:43Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:48:25Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2022-01-16T16:48:25Z", + "containerStatuses": [ + { + "name": "kube-controller-manager", + "state": { + "running": { + "startedAt": "2022-01-16T16:48:26Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-09T14:46:00Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://445583a786272a8e078036ad4204235c129bd5f523405d8d3bf905457ce3e796" + } + }, + "ready": true, + "restartCount": 6, + "image": "registry.local:9001/k8s.gcr.io/kube-controller-manager:v1.21.3", + "imageID": "registry.local:9001/k8s.gcr.io/kube-controller-manager@sha256:020336b75c4893f1849758800d6f98bb2718faf3e5c812f91ce9fc4dfb69543b", + "containerID": "containerd://dd0089bfcdf05eb6d5311c3241ae1e3720e8884cbb0ad94e35be154f928f81ed", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "kube-proxy-trgtf", + "generateName": "kube-proxy-", + "namespace": "kube-system", + "selfLink": "/api/v1/namespaces/kube-system/pods/kube-proxy-trgtf", + "uid": "93b4dc04-75e6-440b-bae9-7260fe5e3fa7", + "resourceVersion": "4221592", + "creationTimestamp": "2021-11-17T17:02:03Z", + "labels": { + "controller-revision-hash": "68489dfcd5", + "k8s-app": "kube-proxy", + "pod-template-generation": "1" + }, + "annotations": { + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995214506Z", + "kubernetes.io/config.source": "api" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "DaemonSet", + "name": "kube-proxy", + "uid": "95c17416-8592-4f75-af74-f9ff181ee74f", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-11-17T17:02:03Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:controller-revision-hash": {}, + "f:k8s-app": {}, + "f:pod-template-generation": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"95c17416-8592-4f75-af74-f9ff181ee74f\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:affinity": { + ".": {}, + "f:nodeAffinity": { + ".": {}, + "f:requiredDuringSchedulingIgnoredDuringExecution": { + ".": {}, + "f:nodeSelectorTerms": {} + } + } + }, + "f:containers": { + "k:{\"name\":\"kube-proxy\"}": { + ".": {}, + "f:command": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"NODE_NAME\"}": { + ".": {}, + "f:name": {}, + "f:valueFrom": { + ".": {}, + "f:fieldRef": { + ".": {}, + "f:apiVersion": {}, + "f:fieldPath": {} + } + } + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:privileged": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/lib/modules\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {}, + "f:readOnly": {} + }, + "k:{\"mountPath\":\"/run/xtables.lock\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/var/lib/kube-proxy\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:hostNetwork": {}, + "f:nodeSelector": { + ".": {}, + "f:kubernetes.io/os": {} + }, + "f:priorityClassName": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:tolerations": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"kube-proxy\"}": { + ".": {}, + "f:configMap": { + ".": {}, + "f:defaultMode": {}, + "f:name": {} + }, + "f:name": {} + }, + "k:{\"name\":\"lib-modules\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + }, + "k:{\"name\":\"xtables-lock\"}": { + ".": {}, + "f:hostPath": { + ".": {}, + "f:path": {}, + "f:type": {} + }, + "f:name": {} + } + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:14Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"192.168.204.2\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "kube-proxy", + "configMap": { + "name": "kube-proxy", + "defaultMode": 420 + } + }, + { + "name": "xtables-lock", + "hostPath": { + "path": "/run/xtables.lock", + "type": "FileOrCreate" + } + }, + { + "name": "lib-modules", + "hostPath": { + "path": "/lib/modules", + "type": "" + } + }, + { + "name": "kube-api-access-qbxgf", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "containers": [ + { + "name": "kube-proxy", + "image": "registry.local:9001/k8s.gcr.io/kube-proxy:v1.21.3", + "command": [ + "/usr/local/bin/kube-proxy", + "--config=/var/lib/kube-proxy/config.conf", + "--hostname-override=$(NODE_NAME)" + ], + "env": [ + { + "name": "NODE_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.nodeName" + } + } + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-proxy", + "mountPath": "/var/lib/kube-proxy" + }, + { + "name": "xtables-lock", + "mountPath": "/run/xtables.lock" + }, + { + "name": "lib-modules", + "readOnly": true, + "mountPath": "/lib/modules" + }, + { + "name": "kube-api-access-qbxgf", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "privileged": true + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "nodeSelector": { + "kubernetes.io/os": "linux" + }, + "serviceAccountName": "kube-proxy", + "serviceAccount": "kube-proxy", + "nodeName": "controller-0", + "hostNetwork": true, + "securityContext": {}, + "imagePullSecrets": [ + { + "name": "registry-local-secret" + } + ], + "affinity": { + "nodeAffinity": { + "requiredDuringSchedulingIgnoredDuringExecution": { + "nodeSelectorTerms": [ + { + "matchFields": [ + { + "key": "metadata.name", + "operator": "In", + "values": [ + "controller-0" + ] + } + ] + } + ] + } + } + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "CriticalAddonsOnly", + "operator": "Exists" + }, + { + "operator": "Exists" + }, + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute" + }, + { + "key": "node.kubernetes.io/disk-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/memory-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/pid-pressure", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/unschedulable", + "operator": "Exists", + "effect": "NoSchedule" + }, + { + "key": "node.kubernetes.io/network-unavailable", + "operator": "Exists", + "effect": "NoSchedule" + } + ], + "priorityClassName": "system-node-critical", + "priority": 2000001000, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:03Z" + }, + { + "type": "Ready", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:09Z" + }, + { + "type": "ContainersReady", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:09Z" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-11-17T17:02:03Z" + } + ], + "hostIP": "192.168.204.2", + "podIP": "192.168.204.2", + "podIPs": [ + { + "ip": "192.168.204.2" + } + ], + "startTime": "2021-11-17T17:02:03Z", + "containerStatuses": [ + { + "name": "kube-proxy", + "state": { + "running": { + "startedAt": "2022-01-16T16:50:09Z" + } + }, + "lastState": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:24:13Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://80a2bec820e2b0bab4168078bef4df9efa8967988c0cd3b9225e57554ab4a1be" + } + }, + "ready": true, + "restartCount": 4, + "image": "registry.local:9001/k8s.gcr.io/kube-proxy:v1.21.3", + "imageID": "registry.local:9001/k8s.gcr.io/kube-proxy@sha256:af5c9bacb913b5751d2d94e11dfd4e183e97b1a4afce282be95ce177f4a0100b", + "containerID": "containerd://fa3ae88f173ceb9c99974f6cedd831f87ff719e9974458ce58f98f2de157d3a3", + "started": true + } + ], + "qosClass": "BestEffort" + } + }, + { + "metadata": { + "name": "reviews-v2-7bf8c9648f-4rzn7", + "generateName": "reviews-v2-7bf8c9648f-", + "namespace": "default", + "selfLink": "/api/v1/namespaces/default/pods/reviews-v2-7bf8c9648f-4rzn7", + "uid": "db71812f-eec7-4da7-89b4-dde63866c3b6", + "resourceVersion": "4222559", + "creationTimestamp": "2021-12-01T13:24:42Z", + "labels": { + "app": "reviews", + "pod-template-hash": "7bf8c9648f", + "security.istio.io/tlsMode": "istio", + "service.istio.io/canonical-name": "reviews", + "service.istio.io/canonical-revision": "v2", + "version": "v2" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.98\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks": "istio-cni", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.98\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "kubectl.kubernetes.io/default-container": "reviews", + "kubectl.kubernetes.io/default-logs-container": "reviews", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995186993Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/interceptionMode": "REDIRECT", + "sidecar.istio.io/status": "{\"initContainers\":[\"istio-validation\"],\"containers\":[\"istio-proxy\"],\"volumes\":[\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istio-token\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"default\"}", + "traffic.sidecar.istio.io/excludeInboundPorts": "15020", + "traffic.sidecar.istio.io/includeInboundPorts": "*", + "traffic.sidecar.istio.io/includeOutboundIPRanges": "*" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "reviews-v2-7bf8c9648f", + "uid": "c6f5e1c1-074d-4a87-8c53-3716a108c4da", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"c6f5e1c1-074d-4a87-8c53-3716a108c4da\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"reviews\"}": { + ".": {}, + "f:env": { + ".": {}, + "k:{\"name\":\"LOG_DIR\"}": { + ".": {}, + "f:name": {}, + "f:value": {} + } + }, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {}, + "f:volumeMounts": { + ".": {}, + "k:{\"mountPath\":\"/opt/ibm/wlp/output\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + }, + "k:{\"mountPath\":\"/tmp\"}": { + ".": {}, + "f:mountPath": {}, + "f:name": {} + } + } + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {}, + "f:volumes": { + ".": {}, + "k:{\"name\":\"tmp\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + }, + "k:{\"name\":\"wlp-output\"}": { + ".": {}, + "f:emptyDir": {}, + "f:name": {} + } + } + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:49Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:25:16Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.98\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istio-envoy", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "wlp-output", + "emptyDir": {} + }, + { + "name": "tmp", + "emptyDir": {} + }, + { + "name": "kube-api-access-hb4qc", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "istio-validation", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "istio-iptables", + "-p", + "15001", + "-z", + "15006", + "-u", + "1337", + "-m", + "REDIRECT", + "-i", + "*", + "-x", + "", + "-b", + "*", + "-d", + "15090,15021,15020", + "--run-validation", + "--skip-rule-apply" + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-hb4qc", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "reviews", + "image": "docker.io/istio/examples-bookinfo-reviews-v2:1.16.2", + "ports": [ + { + "containerPort": 9080, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "LOG_DIR", + "value": "/tmp/logs" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "tmp", + "mountPath": "/tmp" + }, + { + "name": "wlp-output", + "mountPath": "/opt/ibm/wlp/output" + }, + { + "name": "kube-api-access-hb4qc", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 1000 + } + }, + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "sidecar", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info", + "--concurrency", + "2" + ], + "ports": [ + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "PROXY_CONFIG", + "value": "{}\n" + }, + { + "name": "ISTIO_META_POD_PORTS", + "value": "[\n {\"containerPort\":9080,\"protocol\":\"TCP\"}\n]" + }, + { + "name": "ISTIO_META_APP_CONTAINERS", + "value": "reviews" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + }, + { + "name": "ISTIO_META_INTERCEPTION_MODE", + "value": "REDIRECT" + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "reviews-v2" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/default/deployments/reviews-v2" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "istio-token", + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "kube-api-access-hb4qc", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 3, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "bookinfo-reviews", + "serviceAccount": "bookinfo-reviews", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:50Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [reviews istio-proxy]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [reviews istio-proxy]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "startTime": "2021-12-01T13:24:46Z", + "initContainerStatuses": [ + { + "name": "istio-validation", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2021-12-01T13:24:50Z", + "finishedAt": "2021-12-01T13:24:50Z", + "containerID": "containerd://3474777eef87a02a590b2f0be3394b15ce934b4784ddfe44b4ae9962ca8bf361" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://3474777eef87a02a590b2f0be3394b15ce934b4784ddfe44b4ae9962ca8bf361" + } + ], + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:13Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://21c59502edb0e5569af5b1f8cbfbbce7b4c8537ec05fc5c9f4647dad458d0efa" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://21c59502edb0e5569af5b1f8cbfbbce7b4c8537ec05fc5c9f4647dad458d0efa", + "started": false + }, + { + "name": "reviews", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:13Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://4a81025639e60ebded76e93bc0c5995bd8e77764e70689b72d780feaa90f6474" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/examples-bookinfo-reviews-v2:1.16.2", + "imageID": "docker.io/istio/examples-bookinfo-reviews-v2@sha256:82497d66ab8cac1ad9506218e4ccc708ec1db59450c6c4c8d645d1b161611a5d", + "containerID": "containerd://4a81025639e60ebded76e93bc0c5995bd8e77764e70689b72d780feaa90f6474", + "started": false + } + ], + "qosClass": "Burstable" + } + }, + { + "metadata": { + "name": "ratings-v1-b6994bb9-f8v4q", + "generateName": "ratings-v1-b6994bb9-", + "namespace": "default", + "selfLink": "/api/v1/namespaces/default/pods/ratings-v1-b6994bb9-f8v4q", + "uid": "997a67f6-facd-416b-a22a-2e2f24f633fb", + "resourceVersion": "4222778", + "creationTimestamp": "2021-12-01T13:24:43Z", + "labels": { + "app": "ratings", + "pod-template-hash": "b6994bb9", + "security.istio.io/tlsMode": "istio", + "service.istio.io/canonical-name": "ratings", + "service.istio.io/canonical-revision": "v1", + "version": "v1" + }, + "annotations": { + "cni.projectcalico.org/podIP": "", + "cni.projectcalico.org/podIPs": "", + "k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.88\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "k8s.v1.cni.cncf.io/networks": "istio-cni", + "k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"\",\n \"ips\": [\n \"172.16.192.88\"\n ],\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"default/istio-cni\",\n \"dns\": {}\n}]", + "kubectl.kubernetes.io/default-container": "ratings", + "kubectl.kubernetes.io/default-logs-container": "ratings", + "kubernetes.io/config.seen": "2022-01-16T16:50:01.995199330Z", + "kubernetes.io/config.source": "api", + "prometheus.io/path": "/stats/prometheus", + "prometheus.io/port": "15020", + "prometheus.io/scrape": "true", + "sidecar.istio.io/interceptionMode": "REDIRECT", + "sidecar.istio.io/status": "{\"initContainers\":[\"istio-validation\"],\"containers\":[\"istio-proxy\"],\"volumes\":[\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istio-token\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"default\"}", + "traffic.sidecar.istio.io/excludeInboundPorts": "15020", + "traffic.sidecar.istio.io/includeInboundPorts": "*", + "traffic.sidecar.istio.io/includeOutboundIPRanges": "*" + }, + "ownerReferences": [ + { + "apiVersion": "apps/v1", + "kind": "ReplicaSet", + "name": "ratings-v1-b6994bb9", + "uid": "bf26b947-1979-46f9-a54c-b00db9d8d5f5", + "controller": true, + "blockOwnerDeletion": true + } + ], + "managedFields": [ + { + "manager": "kube-controller-manager", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:42Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:generateName": {}, + "f:labels": { + ".": {}, + "f:app": {}, + "f:pod-template-hash": {}, + "f:version": {} + }, + "f:ownerReferences": { + ".": {}, + "k:{\"uid\":\"bf26b947-1979-46f9-a54c-b00db9d8d5f5\"}": { + ".": {}, + "f:apiVersion": {}, + "f:blockOwnerDeletion": {}, + "f:controller": {}, + "f:kind": {}, + "f:name": {}, + "f:uid": {} + } + } + }, + "f:spec": { + "f:containers": { + "k:{\"name\":\"ratings\"}": { + ".": {}, + "f:image": {}, + "f:imagePullPolicy": {}, + "f:name": {}, + "f:ports": { + ".": {}, + "k:{\"containerPort\":9080,\"protocol\":\"TCP\"}": { + ".": {}, + "f:containerPort": {}, + "f:protocol": {} + } + }, + "f:resources": {}, + "f:securityContext": { + ".": {}, + "f:runAsUser": {} + }, + "f:terminationMessagePath": {}, + "f:terminationMessagePolicy": {} + } + }, + "f:dnsPolicy": {}, + "f:enableServiceLinks": {}, + "f:restartPolicy": {}, + "f:schedulerName": {}, + "f:securityContext": {}, + "f:serviceAccount": {}, + "f:serviceAccountName": {}, + "f:terminationGracePeriodSeconds": {} + } + } + }, + { + "manager": "calico", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:52Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:cni.projectcalico.org/podIP": {}, + "f:cni.projectcalico.org/podIPs": {} + } + } + } + }, + { + "manager": "multus", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:24:53Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:metadata": { + "f:annotations": { + "f:k8s.v1.cni.cncf.io/network-status": {}, + "f:k8s.v1.cni.cncf.io/networks-status": {} + } + } + } + }, + { + "manager": "kubelet", + "operation": "Update", + "apiVersion": "v1", + "time": "2021-12-01T13:25:50Z", + "fieldsType": "FieldsV1", + "fieldsV1": { + "f:status": { + "f:conditions": { + "k:{\"type\":\"ContainersReady\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Initialized\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + }, + "k:{\"type\":\"Ready\"}": { + ".": {}, + "f:lastProbeTime": {}, + "f:lastTransitionTime": {}, + "f:status": {}, + "f:type": {} + } + }, + "f:containerStatuses": {}, + "f:hostIP": {}, + "f:initContainerStatuses": {}, + "f:phase": {}, + "f:podIP": {}, + "f:podIPs": { + ".": {}, + "k:{\"ip\":\"172.16.192.88\"}": { + ".": {}, + "f:ip": {} + } + }, + "f:startTime": {} + } + } + } + ] + }, + "spec": { + "volumes": [ + { + "name": "istio-envoy", + "emptyDir": { + "medium": "Memory" + } + }, + { + "name": "istio-data", + "emptyDir": {} + }, + { + "name": "istio-podinfo", + "downwardAPI": { + "items": [ + { + "path": "labels", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.labels" + } + }, + { + "path": "annotations", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.annotations" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istio-token", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "audience": "istio-ca", + "expirationSeconds": 43200, + "path": "istio-token" + } + } + ], + "defaultMode": 420 + } + }, + { + "name": "istiod-ca-cert", + "configMap": { + "name": "istio-ca-root-cert", + "defaultMode": 420 + } + }, + { + "name": "kube-api-access-ljrts", + "projected": { + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3607, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + }, + { + "downwardAPI": { + "items": [ + { + "path": "namespace", + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + ] + } + } + ], + "defaultMode": 420 + } + } + ], + "initContainers": [ + { + "name": "istio-validation", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "istio-iptables", + "-p", + "15001", + "-z", + "15006", + "-u", + "1337", + "-m", + "REDIRECT", + "-i", + "*", + "-x", + "", + "-b", + "*", + "-d", + "15090,15021,15020", + "--run-validation", + "--skip-rule-apply" + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "kube-api-access-ljrts", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "containers": [ + { + "name": "ratings", + "image": "docker.io/istio/examples-bookinfo-ratings-v1:1.16.2", + "ports": [ + { + "containerPort": 9080, + "protocol": "TCP" + } + ], + "resources": {}, + "volumeMounts": [ + { + "name": "kube-api-access-ljrts", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "runAsUser": 1000 + } + }, + { + "name": "istio-proxy", + "image": "docker.io/istio/proxyv2:1.11.4", + "args": [ + "proxy", + "sidecar", + "--domain", + "$(POD_NAMESPACE).svc.cluster.local", + "--proxyLogLevel=warning", + "--proxyComponentLogLevel=misc:error", + "--log_output_level=default:info", + "--concurrency", + "2" + ], + "ports": [ + { + "name": "http-envoy-prom", + "containerPort": 15090, + "protocol": "TCP" + } + ], + "env": [ + { + "name": "JWT_POLICY", + "value": "third-party-jwt" + }, + { + "name": "PILOT_CERT_PROVIDER", + "value": "istiod" + }, + { + "name": "CA_ADDR", + "value": "istiod.istio-system.svc:15012" + }, + { + "name": "POD_NAME", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.name" + } + } + }, + { + "name": "POD_NAMESPACE", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "metadata.namespace" + } + } + }, + { + "name": "INSTANCE_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.podIP" + } + } + }, + { + "name": "SERVICE_ACCOUNT", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "spec.serviceAccountName" + } + } + }, + { + "name": "HOST_IP", + "valueFrom": { + "fieldRef": { + "apiVersion": "v1", + "fieldPath": "status.hostIP" + } + } + }, + { + "name": "PROXY_CONFIG", + "value": "{}\n" + }, + { + "name": "ISTIO_META_POD_PORTS", + "value": "[\n {\"containerPort\":9080,\"protocol\":\"TCP\"}\n]" + }, + { + "name": "ISTIO_META_APP_CONTAINERS", + "value": "ratings" + }, + { + "name": "ISTIO_META_CLUSTER_ID", + "value": "Kubernetes" + }, + { + "name": "ISTIO_META_INTERCEPTION_MODE", + "value": "REDIRECT" + }, + { + "name": "ISTIO_META_WORKLOAD_NAME", + "value": "ratings-v1" + }, + { + "name": "ISTIO_META_OWNER", + "value": "kubernetes://apis/apps/v1/namespaces/default/deployments/ratings-v1" + }, + { + "name": "ISTIO_META_MESH_ID", + "value": "cluster.local" + }, + { + "name": "TRUST_DOMAIN", + "value": "cluster.local" + } + ], + "resources": { + "limits": { + "cpu": "2", + "memory": "1Gi" + }, + "requests": { + "cpu": "10m", + "memory": "40Mi" + } + }, + "volumeMounts": [ + { + "name": "istiod-ca-cert", + "mountPath": "/var/run/secrets/istio" + }, + { + "name": "istio-data", + "mountPath": "/var/lib/istio/data" + }, + { + "name": "istio-envoy", + "mountPath": "/etc/istio/proxy" + }, + { + "name": "istio-token", + "mountPath": "/var/run/secrets/tokens" + }, + { + "name": "istio-podinfo", + "mountPath": "/etc/istio/pod" + }, + { + "name": "kube-api-access-ljrts", + "readOnly": true, + "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount" + } + ], + "readinessProbe": { + "httpGet": { + "path": "/healthz/ready", + "port": 15021, + "scheme": "HTTP" + }, + "initialDelaySeconds": 1, + "timeoutSeconds": 3, + "periodSeconds": 2, + "successThreshold": 1, + "failureThreshold": 30 + }, + "terminationMessagePath": "/dev/termination-log", + "terminationMessagePolicy": "File", + "imagePullPolicy": "IfNotPresent", + "securityContext": { + "capabilities": { + "drop": [ + "ALL" + ] + }, + "privileged": false, + "runAsUser": 1337, + "runAsGroup": 1337, + "runAsNonRoot": true, + "readOnlyRootFilesystem": true, + "allowPrivilegeEscalation": false + } + } + ], + "restartPolicy": "Always", + "terminationGracePeriodSeconds": 30, + "dnsPolicy": "ClusterFirst", + "serviceAccountName": "bookinfo-ratings", + "serviceAccount": "bookinfo-ratings", + "nodeName": "controller-0", + "securityContext": { + "fsGroup": 1337 + }, + "schedulerName": "default-scheduler", + "tolerations": [ + { + "key": "node.kubernetes.io/not-ready", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + }, + { + "key": "node.kubernetes.io/unreachable", + "operator": "Exists", + "effect": "NoExecute", + "tolerationSeconds": 30 + } + ], + "priority": 0, + "enableServiceLinks": true, + "preemptionPolicy": "PreemptLowerPriority" + }, + "status": { + "phase": "Running", + "conditions": [ + { + "type": "Initialized", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:55Z" + }, + { + "type": "Ready", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [ratings istio-proxy]" + }, + { + "type": "ContainersReady", + "status": "False", + "lastProbeTime": null, + "lastTransitionTime": "2022-01-16T16:50:02Z", + "reason": "ContainersNotReady", + "message": "containers with unready status: [ratings istio-proxy]" + }, + { + "type": "PodScheduled", + "status": "True", + "lastProbeTime": null, + "lastTransitionTime": "2021-12-01T13:24:46Z" + } + ], + "hostIP": "192.168.204.2", + "startTime": "2021-12-01T13:24:46Z", + "initContainerStatuses": [ + { + "name": "istio-validation", + "state": { + "terminated": { + "exitCode": 0, + "reason": "Completed", + "startedAt": "2021-12-01T13:24:54Z", + "finishedAt": "2021-12-01T13:24:54Z", + "containerID": "containerd://06a1eaf471870dbcd81514ea0d261c5205acf9e09dc8f3b214db929ab8160930" + } + }, + "lastState": {}, + "ready": true, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://06a1eaf471870dbcd81514ea0d261c5205acf9e09dc8f3b214db929ab8160930" + } + ], + "containerStatuses": [ + { + "name": "istio-proxy", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:47Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://9b02e49a329ecdbd95b7c6ea2496c47834b13fd5d9b705cb02f0f93c7e68aa4d" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/proxyv2:1.11.4", + "imageID": "docker.io/istio/proxyv2@sha256:68b1012e5ba209161671f0e76c92baad845cef810fa0a7cf1b105fee8f0d3e46", + "containerID": "containerd://9b02e49a329ecdbd95b7c6ea2496c47834b13fd5d9b705cb02f0f93c7e68aa4d", + "started": false + }, + { + "name": "ratings", + "state": { + "terminated": { + "exitCode": 255, + "reason": "Unknown", + "startedAt": "2021-12-01T13:25:47Z", + "finishedAt": "2022-01-16T16:38:24Z", + "containerID": "containerd://c21edaf09c3c3190c8afa7c4ade30540ec1f2e6097cc41ca77108b4ba51650c9" + } + }, + "lastState": {}, + "ready": false, + "restartCount": 0, + "image": "docker.io/istio/examples-bookinfo-ratings-v1:1.16.2", + "imageID": "docker.io/istio/examples-bookinfo-ratings-v1@sha256:5fbfd3a14fff229f15e689d07e5214bc5eb1e929766e45eda761cbc9ef7a5589", + "containerID": "containerd://c21edaf09c3c3190c8afa7c4ade30540ec1f2e6097cc41ca77108b4ba51650c9", + "started": false + } + ], + "qosClass": "Burstable" + } + } + ] +} \ No newline at end of file diff --git a/utilities/k8s-coredump/k8s-coredump/LICENSE b/utilities/k8s-coredump/k8s-coredump/LICENSE new file mode 100644 index 00000000..d6456956 --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/LICENSE @@ -0,0 +1,202 @@ + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/utilities/k8s-coredump/k8s-coredump/k8s_coredump/__init__.py b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/utilities/k8s-coredump/k8s-coredump/k8s_coredump/__main__.py b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/__main__.py new file mode 100644 index 00000000..a7db7026 --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/__main__.py @@ -0,0 +1,18 @@ +import sys + +from . import coredump + +def main(): + # https://man7.org/linux/man-pages/man5/core.5.html + kwargs = { + 'pid': sys.argv[1], # %P + 'uid': sys.argv[2], # %u + 'gid': sys.argv[3], # %g + 'signal': sys.argv[4], # %s + 'timestamp': sys.argv[5], # %t + 'comm': sys.argv[6], # %e + } + coredump.CoreDumpHandler(**kwargs) + +if __name__ == "__main__": + main() diff --git a/utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/__init__.py b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/constants.py b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/constants.py new file mode 100644 index 00000000..0fe3dbf9 --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/common/constants.py @@ -0,0 +1,6 @@ + +K8S_COREDUMP_LOG = "/var/log/k8s-coredump.log" +K8S_COREDUMP_CONF = "/etc/k8s-coredump-conf.json" +K8S_COREDUMP_TOKEN = "k8s_coredump_token" +LOCALHOST_URL = "https://localhost:10250/pods" +SYSTEMD_COREDUMP = "/usr/lib/systemd/systemd-coredump" diff --git a/utilities/k8s-coredump/k8s-coredump/k8s_coredump/coredump.py b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/coredump.py new file mode 100644 index 00000000..e88f4fcc --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/k8s_coredump/coredump.py @@ -0,0 +1,142 @@ +import io +import json +import logging +import os +import re +import subprocess +import sys + +import nsenter +import requests + +from .common.constants import K8S_COREDUMP_CONF +from .common.constants import K8S_COREDUMP_LOG +from .common.constants import K8S_COREDUMP_TOKEN +from .common.constants import LOCALHOST_URL +from .common.constants import SYSTEMD_COREDUMP + +logging.basicConfig(filename=K8S_COREDUMP_LOG, level=logging.DEBUG) +LOG = logging.getLogger("k8s-coredump") + + +def _getToken(): + try: + with open(K8S_COREDUMP_CONF, 'r') as token_file: + data = json.loads(token_file.read()) + token = data.get(K8S_COREDUMP_TOKEN) + return token + except IOError: + LOG.error("Error: File does not appear to exist.") + return None + + +# TODO (spresato) Need to be implemented +def _parseCoredumpPattern(pattern): + pass + + +def _getPodUID(pid): + try: + pattern = re.compile("\d+:.+:/[^/]+/kubepods/[^/]+/pod([^/]+)/([0-9a-f]{64})") + cgroups = os.path.join("/proc", pid, "cgroup") + with io.open(cgroups, "r") as f: + for line in f: + match = re.match(pattern, line) + if match: + # extract pod UID from pod cgroup path + return match.group(1) + except IOError as e: + LOG.error("Failed to read process cgroups: {}".format(e)) + sys.exit(-1) + return None # normal for processes not running in a container + + +def _lookupPod(pid): + podUID = _getPodUID(pid) + LOG.debug("lookupPod: podUID={}".format(podUID)) + # retrieve pod details from kubelet + if podUID: + url = LOCALHOST_URL + token = _getToken() + headers = {"Authorization": "Bearer %s" % token} + timeout = 1 + pods = requests.get(url=url, headers=headers, timeout=timeout, verify=False).json() + for pod in pods.get('items'): + metadata = pod.get('metadata') + uid = metadata.get('uid') + if uid == podUID: + return pod + + return None + + +def _systemCoreFile(): + # delegate handling to systemd coredump handler + try: + cmd = [SYSTEMD_COREDUMP] + sys.argv[1:] + subprocess.run(cmd) + except subprocess.CalledProcessError as e: + LOG.error("Failed to call systemd-coredump: {}".format(e)) + sys.exit(-1) + + +def _podCoreFile(pid, corefile): + # create core file relative to dumping process if not an absolute path + if not os.path.isabs(corefile): + try: + path = os.path.join("/proc", pid, "cwd") + cwd = os.path.realpath(path) + corefile = os.path.join(cwd, corefile) + except os.OSError as e: + LOG.error("Failed to get current working directory: {}".format(e)) + sys.exit(-1) + + LOG.debug("podCoreFile: corefile={}".format(corefile)) + + with nsenter.Namespace(pid, 'mnt') as ns: + try: + with io.open(corefile, "wb") as f: + f.write(sys.stdin.buffer.read()) + f.flush() + except IOError as e: + LOG.error("failed to create core file: {}".format(e)) + sys.exit(-1) + + +def CoreDumpHandler(**kwargs): + pid = kwargs['pid'] + uid = kwargs['uid'] + exe = kwargs['comm'] + + LOG.critical("Process %s (%s) of user %s dumped core." % (pid, exe, uid)) + + pod = _lookupPod(pid) + if pod: + try: + metadata = pod['metadata'] + annotations = metadata['annotations'] + core_pattern = annotations.get("starlingx.io/core_pattern") + if core_pattern is not None: + LOG.info("Pod %s/%s handling core dump for %s" % \ + (metadata['namespace'], metadata['name'], pid)) + if not core_pattern: + # default core pattern + corefile = "core.%s.%s" % (exe, pid) + else: + # https://man7.org/linux/man-pages/man5/core.5.html + corefile = _parseCoredumpPattern(core_pattern) + + _podCoreFile(pid, corefile) + return # core dump handled by Pod + else: + LOG.debug("Pod %s/%s does not define annotation core_pattern" % \ + (metadata['namespace'], metadata['name'])) + except ValueError as e: + LOG.error("Pod defined an invalid core dump annotation: {}".format(e)) + sys.exit(-1) + except KeyError: + LOG.debug("Pod does have annotations defined") + pass + + # not handled by pod, redirect to systemd coredump handler + _systemCoreFile() diff --git a/utilities/k8s-coredump/k8s-coredump/requirements.txt b/utilities/k8s-coredump/k8s-coredump/requirements.txt new file mode 100644 index 00000000..3a554037 --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/requirements.txt @@ -0,0 +1,2 @@ +nsenter +requests diff --git a/utilities/k8s-coredump/k8s-coredump/setup.cfg b/utilities/k8s-coredump/k8s-coredump/setup.cfg new file mode 100644 index 00000000..2f00022d --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/setup.cfg @@ -0,0 +1,27 @@ +[metadata] +name = k8s_coredump +summary = A python handler for k8s coredump +author = StarlingX +author-email = starlingx-discuss@lists.starlingx.io +home-page = https://opendev.org/starlingx/utilities +classifier = + +[global] +setup-hooks = + pbr.hooks.setup_hook + +[files] +packages = + k8s_coredump + +[entry_points] +console_scripts = + k8s-coredump = k8s_coredump.__main__:main + +[egg_info] +tag_build = +tag_date = 0 +tag_svn_revision = 0 + +[wheel] +universal = 1 diff --git a/utilities/k8s-coredump/k8s-coredump/setup.py b/utilities/k8s-coredump/k8s-coredump/setup.py new file mode 100644 index 00000000..175fc602 --- /dev/null +++ b/utilities/k8s-coredump/k8s-coredump/setup.py @@ -0,0 +1,21 @@ +#!/usr/bin/env python +# +# Copyright (c) 2022 Wind River Systems, Inc. +# +# SPDX-License-Identifier: Apache-2.0 +# +import setuptools + +setuptools.setup( + name='k8s_coredump', + version='1.0.0', + description='K8s coredump handler', + license='Apache-2.0', + install_requires=['requests', 'nsenter'], + packages=['k8s_coredump'], + include_package_data=True, + setup_requires=['pbr>=2.0.0'], + pbr=True, + entry_points={ + } +)