Name:             cert-manager-webhook-687f57d79b-22grv
Namespace:        cert-manager
Priority:         0
Service Account:  cert-manager-webhook
Node:             crc/192.168.126.11
Start Time:       Sat, 31 Jan 2026 09:12:56 +0000
Labels:           app=webhook
                  app.kubernetes.io/component=webhook
                  app.kubernetes.io/instance=cert-manager
                  app.kubernetes.io/name=webhook
                  app.kubernetes.io/version=v1.19.2
                  pod-template-hash=687f57d79b
Annotations:      k8s.ovn.org/pod-networks:
                    {"default":{"ip_addresses":["10.217.0.5/23"],"mac_address":"0a:58:0a:d9:00:05","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/...
                  k8s.v1.cni.cncf.io/network-status:
                    [{
                        "name": "ovn-kubernetes",
                        "interface": "eth0",
                        "ips": [
                            "10.217.0.5"
                        ],
                        "mac": "0a:58:0a:d9:00:05",
                        "default": true,
                        "dns": {}
                    }]
                  openshift.io/scc: restricted-v2
                  prometheus.io/path: /metrics
                  prometheus.io/port: 9402
                  prometheus.io/scrape: true
                  seccomp.security.alpha.kubernetes.io/pod: runtime/default
Status:           Running
SeccompProfile:   RuntimeDefault
IP:               10.217.0.5
IPs:
  IP:           10.217.0.5
Controlled By:  ReplicaSet/cert-manager-webhook-687f57d79b
Containers:
  cert-manager-webhook:
    Container ID:  cri-o://8a54447fbc2df77483fc47ed3cd361cd6819cb3ac4710d4892449b8b1ea4d522
    Image:         quay.io/jetstack/cert-manager-webhook:v1.19.2
    Image ID:      quay.io/jetstack/cert-manager-webhook@sha256:041f7bb9259557188d7ff416ce90d670a0d0aa8710203927703743682064270b
    Ports:         10250/TCP, 6080/TCP, 9402/TCP
    Host Ports:    0/TCP, 0/TCP, 0/TCP
    Args:
      --v=2
      --secure-port=10250
      --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)
      --dynamic-serving-ca-secret-name=cert-manager-webhook-ca
      --dynamic-serving-dns-names=cert-manager-webhook
      --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)
      --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc
    State:          Running
      Started:      Sat, 31 Jan 2026 09:13:35 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get http://:healthcheck/livez delay=60s timeout=1s period=10s #success=1 #failure=3
    Readiness:      http-get http://:healthcheck/healthz delay=5s timeout=1s period=5s #success=1 #failure=3
    Environment:
      POD_NAMESPACE:  cert-manager (v1:metadata.namespace)
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-2jbwq (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  kube-api-access-2jbwq:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
    ConfigMapName:           openshift-service-ca.crt
    ConfigMapOptional:       <nil>
QoS Class:                   BestEffort
Node-Selectors:              kubernetes.io/os=linux
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason                  Age                   From               Message
  ----     ------                  ----                  ----               -------
  Normal   Scheduled               82m                   default-scheduler  Successfully assigned cert-manager/cert-manager-webhook-687f57d79b-22grv to crc
  Warning  FailedCreatePodSandBox  82m                   kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = failed to create pod network sandbox k8s_cert-manager-webhook-687f57d79b-22grv_cert-manager_eb0ab04d-4e0a-4a84-965a-2c0513d6d79a_0(1ba183ba3d0b258b1d1ed5351cf9656d57d25f85e3b76cdfbd26b1b95e7eb4c3): no CNI configuration file in /etc/kubernetes/cni/net.d/. Has your network provider started?
  Warning  FailedCreatePodSandBox  82m                   kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = failed to create pod network sandbox k8s_cert-manager-webhook-687f57d79b-22grv_cert-manager_eb0ab04d-4e0a-4a84-965a-2c0513d6d79a_0(a9a2f3f5cb1624d0e6211b49e1d313b1fbb41cd9fada157559917b34c42571f8): no CNI configuration file in /etc/kubernetes/cni/net.d/. Has your network provider started?
  Warning  FailedCreatePodSandBox  82m                   kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = failed to create pod network sandbox k8s_cert-manager-webhook-687f57d79b-22grv_cert-manager_eb0ab04d-4e0a-4a84-965a-2c0513d6d79a_0(ddee02cf1669231f0dbedc4784564b8764a7dfa4a45b3dff25cafe244fb837c5): no CNI configuration file in /etc/kubernetes/cni/net.d/. Has your network provider started?
  Normal   AddedInterface          82m                   multus             Add eth0 [10.217.0.5/23] from ovn-kubernetes
  Normal   Pulling                 82m                   kubelet            Pulling image "quay.io/jetstack/cert-manager-webhook:v1.19.2"
  Normal   Pulled                  82m                   kubelet            Successfully pulled image "quay.io/jetstack/cert-manager-webhook:v1.19.2" in 2.099s (2.099s including waiting). Image size: 69110520 bytes.
  Normal   Created                 82m                   kubelet            Created container cert-manager-webhook
  Normal   Started                 82m                   kubelet            Started container cert-manager-webhook
  Warning  Unhealthy               5m48s (x3 over 6m3s)  kubelet            Readiness probe failed: Get "http://10.217.0.5:6080/healthz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
  Warning  Unhealthy               5m48s                 kubelet            Liveness probe failed: Get "http://10.217.0.5:6080/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
